{"schema":"hottub-news/story/v1","story":"st_syliaaovt6dbu3ngby7a","title":"Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation","title_en":null,"outlets":6,"brief":null,"page":"https://hottub.news/stories/warning-two-unpatched-citrix-netscaler-rce-zero-days-under-active-syliaaovt6","count":7,"items":[{"id":"n_cj2aknmm4srnxwx7wbmq","seq":776804,"kind":"article","title":"Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected","url":"https://cyberscoop.com/citrix-netscaler-zero-day-attacks-three-weeks-undetected","summary":"Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expect more attacks to come. The post Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected appeared first on CyberScoop .","published":"2026-09-29T21:30:22Z","seen":"2026-09-29T22:28:30Z","lang":"en","source":{"id":"kite-cyberscoop-com-b5038a","name":"cyberscoop.com","domain":"cyberscoop.com"},"via":"kite-cyberscoop-com-b5038a","topics":["cybersecurity","research","threats","citrix","citrix netscaler","google threat intelligence group","mandiant","netscaler"],"authors":["Matt Kapko"],"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.6200000047683716,"category2":"crime-law","sentiment":"negative","tone":-0.7400000095367432,"political":0.05000000074505806},{"id":"n_h4zq36ds67unh7i7ylta","seq":552058,"kind":"article","title":"Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings","url":"https://cyberscoop.com/citrix-zero-days-delayed-disclosure","summary":"The vendor’s products are a common, recurring target for attackers, yet the official warning for some Citrix NetScaler customers was too late. The post Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings appeared first on CyberScoop .","published":"2026-09-29T00:58:15Z","seen":"2026-09-29T01:02:12Z","lang":"en","source":{"id":"kite-cyberscoop-com-b5038a","name":"cyberscoop.com","domain":"cyberscoop.com"},"via":"kite-cyberscoop-com-b5038a","topics":["cybersecurity","research","threats","citrix","cybersecurity and infrastructure…","google threat intelligence group","greynoise","mandiant"],"authors":["Matt Kapko"],"entities":[{"id":"Q12040775","name":"Citrix ADC","type":"other"}],"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.699999988079071,"sentiment":"negative","tone":-0.7200000286102295,"political":0.1599999964237213},{"id":"n_ubsge2gzy6kfhnjn7t4q","seq":541133,"kind":"article","title":"Hackers Hit NetScaler Zero-Days Before Citrix Patched","url":"https://www.govinfosecurity.com/hackers-hit-netscaler-zero-days-before-citrix-patched-a-32959","published":"2026-09-28T23:21:20Z","seen":"2026-09-28T23:21:20Z","lang":"en","source":{"id":"govinfosecurity.com","name":"govinfosecurity.com","domain":"govinfosecurity.com"},"via":"gdelt-gkg-english","topics":["economy","science","technology"],"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.8299999833106995,"sentiment":"negative","tone":-0.8600000143051147,"political":0.07000000029802322},{"id":"n_qealuukbbe5637iomkka","seq":528570,"kind":"article","title":"Hackers Hit NetScaler Zero-Days Before Citrix Patched","url":"https://www.bankinfosecurity.com/hackers-hit-netscaler-zero-days-before-citrix-patched-a-32959","published":"2026-09-28T21:51:35Z","seen":"2026-09-28T21:51:35Z","lang":"en","source":{"id":"bankinfosecurity.com","name":"bankinfosecurity.com","domain":"bankinfosecurity.com"},"via":"gdelt-gkg-english","topics":["economy","technology","science"],"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.8299999833106995,"sentiment":"negative","tone":-0.8600000143051147,"political":0.07000000029802322},{"id":"n_wpaf2nq3lmx2dowq77oa","seq":496092,"kind":"article","title":"Citrix says two worrying NetScaler RCE zero-days exploited in attacks","url":"https://www.techradar.com/pro/security/citrix-says-two-worrying-netscaler-rce-zero-days-exploited-in-attacks","published":"2026-09-28T18:30:00Z","seen":"2026-09-28T18:30:17Z","lang":"en","source":{"id":"techradar.com","name":"techradar.com","domain":"techradar.com"},"via":"gdelt-gkg-english","topics":["economy","politics","technology"],"authors":["Sead Fadilpa&scaron","i&#263"],"mentions":2,"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.6800000071525574,"sentiment":"negative","tone":-0.8899999856948853,"political":0.1599999964237213},{"id":"n_y7ju5cpmtoyoldfluapa","seq":474891,"kind":"article","title":"Citrix Patches Two NetScaler RCE Zero-Days Exploited Worldwide","url":"https://www.esecurityplanet.com/news/news-citrix-netscaler-rce-zero-days","published":"2026-09-28T16:42:08Z","seen":"2026-09-28T16:42:08Z","lang":"en","source":{"id":"esecurityplanet.com","name":"esecurityplanet.com","domain":"esecurityplanet.com"},"via":"gdelt-gkg-english","topics":["economy","technology"],"authors":["eSecurityPlanet Staff"],"entities":[{"id":"Q12040775","name":"Citrix ADC","type":"other"}],"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.7400000095367432,"sentiment":"negative","tone":-0.7799999713897705,"political":0.10999999940395355},{"id":"n_syliaaovt6dbu3ngby7a","seq":209154,"kind":"article","title":"Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation","url":"https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html","summary":"Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not confirmed the flaws or published a fix. Some administrators say they have taken appliances offline rather than wait for one to be available. NetScaler ADC and","published":"2026-09-27T07:47:57Z","seen":"2026-09-27T08:10:38Z","lang":"en","source":{"id":"kite-feedburner-com-5fa171","name":"feedburner.com","domain":"feeds.feedburner.com"},"via":"kite-feedburner-com-5fa171","topics":["cybersecurity"],"authors":["author"],"image":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrnnWi_EE_zogEngdPWZDYXQTXqcArqvXtXYDj7_yLDzfVamEw9Nx7taRyM1SQf8-78qtxnt3nhNzcn36WnzYwZvFDQNvglCilw0Ltb4NjVkjjC8GH2nOUTnxIBPvRn8JVPcXJaidmbU0A6z-1RiX_OKgcpkzvL6xV7aM_YpQj6XdYIfalQH3h6o3b7pQ/s1600/citrix-zero-day.jpg","mentions":2,"story":"st_syliaaovt6dbu3ngby7a","category":"science-technology","category_p":0.6100000143051147,"sentiment":"negative","tone":-0.699999988079071,"political":0.12999999523162842}]}