🛡️ **BREAKING: State-Sponsored Actors Exploit Citrix NetScaler RCE Zero-Days; Mass Exploitation Underway Since Early September**
Published Wednesday, September 30, 2026 at 11:44 AM PT BLUF: Suspected state-sponsored threat actors are exploiting two critical remote code execution zero-days in Citrix NetScaler ADC and Gateway (CVE-2026-88771, CVE-2026-88772). Active exploitation began in early September 2026 and has escalated from targeted intrusions to mass attacks affecting organizations globally. Organizations running vulnerable NetScaler instances must patch immediately. ...