Siber Güvenlik Haberleri

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

OverviewOn September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including two critical remote code execution (RCE) vulnerabilities: CVE-2026-88771 and CVE-2026-88772. Both of these RCE vulnerabilities carry a critical CVSSv4 score of 9.5, and both have been confirmed as being actively exploited in the wild as zero-days prior to the vendor disclosure. CVE-2026-88771 affects vulnerable NetScaler deployments in their default configuration, with no additional product features required. The vendor has also indicated that the attack complexity

İlişkili Şirketler

CN

Citrix NetScaler

C

citrix

N

NetScaler

E

envoyproxy

P

Portkey-AI

C

codesys

A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack

İlişkili Şirketler

C

CrowdStrike

N

nvidia

S

Soft-Machine-io

G

gentoo

SentinelOne and NVIDIA: Governing AI From Silicon to Runtime

Read why effective AI governance demands tamperproof, hardware-rooted security controls that autonomous agents cannot reach, bypass, or rewrite at runtime.

İlişkili Şirketler

N

nvidia

A

Android

C

cu

Bring Your Own Vulnerable Device: The EDR Killer Economy

Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from lone-operator tricks into a commercialized, tiered EDR-killer service economy.

Bring Your Own Vulnerable Driver: The EDR Killer Economy

Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from lone-operator tricks into a commercialized, tiered EDR-killer service economy.

3 Consulting Myths Debunked by Unit 42 Experts

Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses. The post 3 Consulting Myths Debunked by Unit 42 Experts appeared first on Unit 42.

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

İlişkili Şirketler

V

Verizon

Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?

Ads appearing all over the Internet are trying to scam people.

İlişkili Şirketler

G

google

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

İlişkili Şirketler

M

microsoft

I

ibm

L

langflow

Trust and the enticing consultancy offer

In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the cyber industry must worry about.