Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

The feed reports widespread active exploitation and emerging malware campaigns, including unpatched Citrix NetScaler RCE zero-days, exploited WordPress, Roundcube, SharePoint, MikroTik, WSO2, Adobe Commerce, and Oracle PeopleSoft flaws. It also covers ClickFix-based malware delivery, credential-stealing malware, Android spyware, compromised GitHub Actions and Terraform providers, cloud data isolation issues, account compromise, and AI-agent security failures. Several vulnerabilities are listed in CISA's KEV catalog or involve unauthenticated remote code execution, indicating urgent patching,оч