@netsecio.bsky.socialCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE
🌐 cyber[.]netsecops[.]io
@infosecbot.bsky.socialWe examined artifacts left behind by attackers during the recent Citrix #NetScaler compromises. Many were already covered by existing generic THOR rules, including rules we've shipped for years.
One script matched SUSP_Linux_Do…
— from @cyb3rops (https://x.com/cyb3rops/status/2105944144375927132)
@netsecio.bsky.socialCritical Alert: Two Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772) are under active global attack. Flaws allow unauthenticated RCE. CISA KEV listed. Patch and hunt for compromise now! #Citrix #NetScaler #CyberSecurity #CVE
🌐 cyber[.]netsecops[.]io
@cyfar.ca~Spiderlabs~
Exploitation progressed from command injection to payloads, reverse shells, config theft, privileged access, and web shells.
-
IOCs: 64[.]94[.]85[.]67, 45[.]141[.]21[.]130, 23[.]27[.]143[.]20
-
#CVE-2026-88771 #NetScaler #ThreatIntel
@thenewoil.orgHackers exploit #Citrix #NetScaler zero-day to deploy web shells
@ralf-ladner.bsky.socialAktiv ausgenutzte Netscaler-Lücken - Arctic Wolf analysiert die Aktivitäten der Angreifer
@AWNetworks #ArcticWolf -Cybersecurity #Cybersicherheit #IncidentResponse #IndicatorsofCompromise #Netscaler #Schwachstelle
@reconbee.bsky.socialAttackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT reconbee.com/attackers-ex...
@calimegai.bsky.social⚠️ Deux failles critiques RCE non corrigées exploitables dans #Citrix #NetScaler confirmées le 27 sept. Citrix a publié des correctifs. Impact large, y compris en config par défaut. #CyberSecurity #Automatisation
@thedailytechfeed.comNetScaler exploit CVE-2026-88771/72 grants attackers root & hides web shell in CSS-like URLs. #Citrix #NetScaler #Vulnerability #Cybersecurity #WebShell #ThreatIntel https://thedailytechfeed.com/critical-post-auth-payload-abuses-netscaler-to-create-superuser-web-shell-access/
@hendryadrian.bsky.socialActive exploitation of Citrix NetScaler CVE-2026-88771 enables pre-auth command injection, payload retrieval, reverse shells, privileged account creation, and web-shell deployment. #Citrix #NetScaler #CVE-2026-88771
@securityonline.bsky.socialCVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.
#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE
@emil.oneI created a small informative website.
pitscaler.com
#citrix #netscaler #pitscaler
@inferlume.bsky.socialCritical Citrix NetScaler zero-days spawn root tunnels and WHIPSHOT web shells across global networks while targeted mercenary spyware exploits Apple CoreGraphics and Cisco network controllers suffer API takeovers.
@hendryadrian.bsky.socialCitrix patched two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, after weeks-long attacks used for unauthenticated RCE, root access, and web shells. Over 100 victims may be affected. #NetScaler #Mandiant #Europe
@reput.ioTwo Citrix NetScaler zero-days gave attackers pre-auth root on the box fronting your whole network. Once inside, their C2 leaves from your own public IP: no foreign address to block. Reputation Radar #13: https://www.reput.io/blog/reputation-radar-13 #ThreatIntel #NetScaler #SOC
@thedailytechfeed.comA DTLS buffer overflow in Citrix NetScaler lets attackers execute code without login via CVE-2026-88772. #CVE2026-88772 #Citrix #NetScaler #Cybersecurity #RemoteCodeExecution https://thedailytechfeed.com/citrix-netscaler-critical-flaw-cve-2026-88772-enables-pre-auth-remote-code-execution/
@thedailytechfeed.comNetScaler CVE-2026-88772 enables root access, WHIPSHOT web shells & SLAPSHOT tunneling—patch now before compromise expands. #NetScaler #ZeroDay #WHIPSHOT #SLAPSHOT #CVE2026-88772 https://thedailytechfeed.com/netscaler-vulnerability-gives-root-access-enables-whipshot-slapshot-attack-tools/
@it4intserver.bsky.socialiT4iNT SERVER Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution VDS VPS Cloud #Cybersecurity #Vulnerability #CVE202688772 #NetScaler #InfoSec
@stemshop.bsky.social🔴 NetScaler CVE-2026-88772 — attacks go beyond RCE
Attackers are deploying WHIPSHOT web shells and SLAPSHOT tunneling malware, gaining root access and pivoting into internal networks.
stemshop.top/blog/netscal...
#CVE #CVE202688772 #Citrix #NetScaler #WebShell #CyberSecurity
@ahmandonk.bsky.social📰 Hacker Eksploitasi Zero-Day Citrix NetScaler untuk Memasang Web Shell
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/30/zero-day-citrix-netscaler-dieksploitasi-web-shell/
#citrix #cybersecurity #hacking #malware #netscaler #rce #security #vulnerability #webShell #zero-day