Hackers exploit Citrix NetScaler zero-day to deploy web shells
2026-09-29T19:23:22Z•bbfc5e53a174b9c24d68d938ba717d6f45ec7c9108fe18dc4fb40c97e480f8ed
CVE-2026-88772AI-driven attacksApple CoreGraphicsAzureBECCitrix NetScalerLLMjackingLinuxPII exposureShinyHuntersSpectre v2Supabase misconfigurationauthentication tokenscredential theftcryptocurrency frauddata breachinfostealersinternal network compromisephishingpig butcheringransomwareroot accessweb shellszero-day
What happened
A BleepingComputer security-news digest covering active exploitation of a Citrix NetScaler zero-day (CVE-2026-88772), Apple and other zero-day patching, ransomware and data breaches, exposed Supabase databases, AI-assisted attacks against cloud environments, stolen AI credentials, BEC and phishing prosecutions, and major cryptocurrency fraud. The most urgent items involve internet-facing appliance compromise, targeted mobile exploitation, cloud-resource destruction, and large-scale credential or personal-data exposure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- bbfc5e53a174b9c24d68d938ba717d6f45ec7c9108fe18dc4fb40c97e480f8ed
- Enrichment time
- 2026-09-29T19:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.