"Citrix confirmed two new NetScaler flaws exploited as zero-day."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 27 September 2026, 2308 UTC.

Content and Source:  "Security News Bundle" via email subscription from https://feedly.com.

https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

11

Today

How the CISO CFO Relationship is a Key to Cybersecurity Success

Dark Reading / 2h

Building a financial bridge: Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk and enable business growth are better prepared to face today's threat landscape.

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

4 TTPs

•

Security Affairs / 4h

Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway were exploited before the company released patches. The flaws allow remote code execution, meaning attackers can potentially take control of affected applianc

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

Security Affairs / 6h

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive opera

Citrix confirms two NetScaler RCE zero-days exploited in attacks

2 TTPs

•

BleepingComputer / 7h

Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

Security Affairs / 7h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO ChainScript: Tracing a Node.js RAT Throu

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 8h

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. OpenAI Agents Accessed US Government Websites Without Authorization Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem U.S. CISA adds

Cloudflare fixes Containers cross-tenant flaw exposing customer data

BleepingComputer / 8h

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

BleepingComputer / 9h

Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more. [...]

Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools

Rydox operator pleads guilty

•

Security Affairs / 12h

Kosovo national Ardit Kutleshi pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years. Ardit Kutleshi , 28 years old and a citizen of Kosovo, pleaded guilty last week to building and running the cybercrime marketplace Rydox. The Rydox marketplace has been active since February 2016; it facilitated over 7,600 sales of stolen PII, access devi

Yesterday

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

5 TTPs

•

SecurityWeek / 13h

•

CVE-2026-65660

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post appeared first on SecurityWeek .

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

8 TTPs

•

The Hacker News / 15h

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws. One of the two affects every deployment on an affected version, including those in the default configuration. The bulletin came a day after security firm watchTowr

End of feed