Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution（Citrix NetScalerのCVE-2026-88772、認証前からシェルコード実行に至る攻撃手法が判明） #TheHackerNews (Sep 30)
thehackernews.com/2026/09/citr...

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted（OpenSSL、暗号化されていないヒープメモリが漏えいする高深刻度DTLS脆弱性を修正） #TheHackerNews (Sep 30)
thehackernews.com/2026/09/open...

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager（Cisco、SD-WAN Managerの重大な認証バイパス脆弱性が実悪用されていると警告） #TheHackerNews (Sep 30)
thehackernews.com/2026/09/cisc...

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets（攻撃者がZimbraの脆弱性を悪用しWebシェルを展開、認証情報を窃取） #TheHackerNews (Sep 30)
thehackernews.com/2026/09/atta...

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions（OpenAI、欺瞞や無許可の行動を確認しGPT-6.1 Astraのリリースを中止） #TheHackerNews (Sep 29)
thehackernews.com/2026/09/open...

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown（Kiteworks、9時間の予防的停止中に重大な脆弱性を発見・修正） #TheHackerNews （Sep 29） The Hacker News
thehackernews.com/2026/09/kite...

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally（CISA、Citrix NetScalerの2件の重大脆弱性が世界的に悪用されていると警告） #TheHackerNews (Sep 28)
thehackernews.com/2026/09/cisa...

Zero Trust for AI Agents Starts With Fixing Zero Visibility（AIエージェントのゼロトラストは「見えない状態」の解消から始まる） #TheHackerNews (Sep 26)

thehackernews.com/2026/09/zero...

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild（Roundcubeの認証前SQLインジェクション脆弱性、実攻撃で悪用） #TheHackerNews （Sep 25）

thehackernews.com/2026/09/roun...

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild（SharePointのRCEとMikroTik RouterOSの脆弱性、実攻撃で悪用） #TheHackerNews （Sep 26）

thehackernews.com/2026/09/shar...

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation（Citrix NetScalerのRCEゼロデイ2件、実攻撃で悪用） #TheHackerNews （Sep 27）

thehackernews.com/2026/09/warn...

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Source: The Hacker News
Read: https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html
#Cyzo #CyberSecurity #TheHackerNews

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Source: The Hacker News
Read: https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html
#Cyzo #CyberSecurity #TheHackerNews

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Source: The Hacker News
Read: https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html
#Cyzo #CyberSecurity #TheHackerNews

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Source: The Hacker News
Read: https://thehackernews.com/2026/09/kiteworks-urges-customers-to-shut-down.html
#Cyzo #CyberSecurity #TheHackerNews

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Source: The Hacker News
Read: https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html
#Cyzo #CyberSecurity #TheHackerNews

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Source: The Hacker News
Read: https://thehackernews.com/2026/09/elementor-csrf-flaw-lets-attackers-take.html
#Cyzo #CyberSecurity #TheHackerNews

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure（WordPressのCVE-2026-87902、公開から数時間で攻撃者が悪用） #TheHackerNews (Sep 24)

thehackernews.com/2026/09/atta...

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360（17,000件のURLを分析、ClickFixが信頼されたWebサイトをマルウェアの罠に変える手口） #TheHackerNews (Sep 24)

thehackernews.com/2026/09/1700...

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content（1,700超のリポジトリが参照するプレースホルダードメイン、悪意あるコンテンツ配信に悪用） #TheHackerNews （Sep 24）

thehackernews.com/2026/09/plac...