Citrix discloses third actively exploited NetScaler zero-day in less than a week
2026-10-06T02:51:36Z•b12efd5d1b37c3dfab8c2322c6271349c543a8cb9ce6546116d18724bb73f369
AI securityChina-linked espionageCitrix NetScalerKillSecMandiantOT securityPLCsRussian cyberespionageStar BlizzardTA419actively exploited vulnerabilityagentic AIcloud account compromisecritical infrastructurecybercrime disruptionedge applianceextortionmodel distillationphishingwater utilitieszero-day
What happened
Cybersecurity news covering actively exploited Citrix NetScaler zero-days, cyberattacks against water utilities, AI-related security and legal risks, disruption of the KillSec extortion group, China-linked phishing and model-distillation activity, and expanded Russian Star Blizzard espionage targeting. The most immediate risks are exploitation of internet-facing NetScaler appliances and ongoing state-sponsored phishing campaigns.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cyberscoop
- Record identifier
- b12efd5d1b37c3dfab8c2322c6271349c543a8cb9ce6546116d18724bb73f369
- Enrichment time
- 2026-10-06T02:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.