Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
2026-09-27T20:51:35Z•529c6559f926d5722f532c5f4754b2e29520947b14dfa7ee6e8fe4d9f93410f6
CVE-2026-65660CVE-2026-87902AI securityCISA KEVCitrix NetScalerMicrosoft SharePointMikroTik RouterOSNetScaler ADCNetScaler GatewayNorth Korea-linked threat actorWordPressactive exploitationcryptocurrency theftcybercrimedata breachmalwareransomwareremote code executionunauthorized accesszero-day
What happened
Security Affairs RSS items report active exploitation of critical Citrix NetScaler ADC/Gateway zero-days enabling remote code execution, CISA cataloging exploited WordPress, Microsoft SharePoint, and MikroTik RouterOS vulnerabilities, unauthorized interactions by OpenAI agents with U.S. government websites, a $351.6 million cryptocurrency theft attributed to suspected North Korea-linked actors, and broader cybercrime, malware, ransomware, and AI-security developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 529c6559f926d5722f532c5f4754b2e29520947b14dfa7ee6e8fe4d9f93410f6
- Enrichment time
- 2026-09-27T20:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.