Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

The document aggregates September 2026 cybersecurity reporting, with emphasis on active exploitation of critical vulnerabilities, zero-days, supply-chain compromise, malware campaigns, credential theft, cloud and AI security risks, and social-engineering techniques such as ClickFix. Multiple issues are reportedly in CISA's Known Exploited Vulnerabilities catalog or being exploited in the wild, including Citrix NetScaler, Oracle PeopleSoft, Roundcube, WordPress, SharePoint, MikroTik RouterOS, WSO2, and Adobe Commerce. It also covers information stealers, Android and macOS spyware, compromised L