Metasploit adds unauthenticated RCE modules for perimeter devices
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
BeyondTrust patched CVE-2026-102764, a Remote Support authentication bypass exploited since August by China-linked Armory Castle.
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
Citrix patched CVE-2026-88779, a high-severity NetScaler memory overflow exploited as a zero-day.
GBHackers' weekly digest highlights NetScaler zero-days, a 3-million-person Pentagon breach, and multiple AI security incidents.
Citrix patched CVE-2026-88779, a third exploited NetScaler zero-day causing denial of service on SAML appliances.
Pentagon breach exposed about 3 million personnel records while Apple, FortiMail, and Citrix zero-days were exploited.
CISA added actively exploited Citrix NetScaler flaw CVE-2026-88779 to the KEV catalog.
Citrix NetScaler appliances on zero-day fix 14.1-73.37 reboot after crafted SAML traffic crashes nsaaad.
Dual critical NetScaler zero-days in default configs give attackers broad access to Citrix customer networks.
Citrix says critical NetScaler flaws, including unauthenticated RCE, are under active global attack; CISA alerted defenders.
Agencies warn Citrix admins to take NetScalers offline after two unpatched RCE zero-days were exploited.
CISA added actively exploited Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 to the KEV catalog.
Two unpatched Citrix NetScaler zero-days enabling remote code execution are reportedly under active attack, with no vendor patch.
watchTowr warns two unpatched Citrix NetScaler RCE zero-days are allegedly exploited, without Citrix confirmation.
State-sponsored and ransomware actors actively exploit critical Cisco FMC flaws CVE-2026-20079 (CVSS 10.0) and CVE-2026-20316 to gain root access and deploy ransomware.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views