Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
2026-09-29T19:23:51Z•11fecb145ba38982b048ed9830b32f6c3acf02c18effbaebc84914433a36493f
AI-agentsApple-CoreGraphicsAzure-identity-compromiseCitrix-NetScalerF5-BIG-IPLLM-securityactive-exploitationcloud-securitycybercrimedata-breachmalwarenation-state-threatsphishingransomwareremote-code-executionsecurity-newssupply-chain-securityzero-day
What happened
The feed is a September 2026 security-news digest covering active exploitation of zero-day vulnerabilities in Citrix NetScaler, Apple CoreGraphics, and F5 BIG-IP APM; identity, cloud, CRM, and data breaches; phishing and malware campaigns; ransomware and cybercrime activity; and emerging risks from autonomous AI agents. Several reports describe confirmed or suspected nation-state and criminal operations targeting government, financial, technology, telecom, and other organizations. The supplied metadata does not include specific CVE identifiers for most stories.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 11fecb145ba38982b048ed9830b32f6c3acf02c18effbaebc84914433a36493f
- Enrichment time
- 2026-09-29T19:23:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.