SecurityThe Registerabout 3 hours ago
Citrix 0-Day Exploited Before Disclosure
8 min read
Attackers exploited critical Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 since early September, hitting government, financial, education, and legal organizations in North America and Europe. Citrix disclosed the 9.5 CVSS bugs on Sunday, weeks after exploitation began. Google found custom malware WHIPSHOT and SLAPSHOT. Patching alone may not remove intruders, so check for compromise first.
Level
Hype check
Tap to vote and see what everyone thinks.
