Citrix NetScaler zero-days: pre-auth DTLS overflow to root, then WHIPSHOT web shells. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3189 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #WHIPSHOT
@threadlinqs.bsky.social
@threadlinqs.bsky.socialCitrix NetScaler zero-days: pre-auth DTLS overflow to root, then WHIPSHOT web shells. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3189 #ThreatIntel #CVE_2026_88771 #CVE_2026_88772 #WHIPSHOT
@theravenfile.bsky.socialToday, I just dropped an article which might be useful while hunting ongoing #0day #exploit of #citrix #netscalar!
theravenfile.com/2026/10/06/cit
rix-0-day-exploits-cve-2026-88771-cve-2026-88772-in-the-wild/
#ZeroDay #Malware #Slapshot #Whipshot #Python #infosec #security #OSINT #ThreatIntel #CVE
@securityonline.bsky.socialExplore how Citrix NetScaler zero-day attacks exploit DTLS to deploy WHIPSHOT and SLAPSHOT malware, granting attackers persistent internal network access.
#CitrixNetScaler #ZeroDay #WHIPSHOT #SLAPSHOT #Cybersecurity
@securityonline.bsky.socialAttackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access, then hide WHIPSHOT web shells and a SLAPSHOT tunneler. Patch now.
#CitrixNetScaler #ZeroDay #CVE202688772 #CVE202688771 #WHIPSHOT #SLAPSHOT #Mandiant #CyberSecurity
@reconbee.bsky.socialAttackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT reconbee.com/attackers-ex...
@thedailytechfeed.comNetScaler CVE-2026-88772 enables root access, WHIPSHOT web shells & SLAPSHOT tunneling—patch now before compromise expands. #NetScaler #ZeroDay #WHIPSHOT #SLAPSHOT #CVE2026-88772 https://thedailytechfeed.com/netscaler-vulnerability-gives-root-access-enables-whipshot-slapshot-attack-tools/
@hendryadrian.bsky.socialMandiant and GTIG report active exploitation of Citrix NetScaler ADC/Gateway via CVE-2026-88772 and CVE-2026-88771, with custom tools, root access, persistence, and hidden C2 in HTTP headers. #CitrixNetScaler #WHIPSHOT #SLAPSHOT