#zero-day

2 cases

Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772: three weeks of exploitation before the patchMalware

2 Oct 2026

Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772: three weeks of exploitation before the patch

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 were exploited from at least September 3, 2026, three weeks before the September 27 patch. Web shells survive the update; attribution is still only suspected.

Malware

2 Oct 2026

Ivanti Connect Secure zero-days: one December intrusion, 2,100 backdoored appliances and a federal disconnect orderState-SponsoredMalware

13 Sept 2026

Ivanti Connect Secure zero-days: one December intrusion, 2,100 backdoored appliances and a federal disconnect order

CVE-2023-46805 and CVE-2024-21887 gave a suspected China-nexus actor unauthenticated code execution on Ivanti VPN gateways from December 2023. Disclosure turned it into 2,100 compromised appliances in a week, a bypassed mitigation and CISA's order to unplug every federal device.

State-SponsoredMalware

13 Sept 2026