Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Attackers are exploiting two critical Citrix NetScaler zero-days to deploy WHIPSHOT web shells and tunnel inward.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #slapshot
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Mass exploitation of NetScaler CVE-2026-88772 grants attackers root access to deploy WHIPSHOT web shells and SLAPSHOT tunneler against government and financial targets.
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
Attackers exploit Citrix NetScaler zero-days and deploy WHIPSHOT and SLAPSHOT for persistent root access.
Hackers exploit Citrix NetScaler zero-day to deploy web shells
Attackers exploited Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 to plant web shells and tunnel into networks.