2026-10-06: Citrix confirms a third NetScaler zero-day in under two weeks (CVE-2026-88779

Show Notes - 2026-10-06

Stories Covered: - Today: - Citrix NetScaler Zero-Day CVE-2026-88779 Under Active Exploitation (https://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.html) - Atlassian CVE-2026-21589 Path Traversal in Eight Data Center Products (https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html) - Cisco Catalyst SD-WAN Manager CVE-2026-76504 (CVSS 9.8) - No Fix Available (https://research.checkpoint.com/2026/5th-october-threat-intelligence-report/) - KillSec Ransomware Leader Arrested, 16-Year-Old Mastermind in Custody (https://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.html) - ShinyHunters Members Arrested, Two in Custody (https://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.html) - Gentlemen Group Threatens to Leak Data from South African Insurance Companies (https://databreaches.net/2026/10/05/ransomware-group-threatens-to-leak-customer-data-from-top-insurance-companies-in-south-africa/) - Nueva EPS Colombia Healthcare System Breach: $15M Extortion Demand (https://databreaches.net/2026/10/05/nueva-eps-colombias-largest-regional-healthcare-promoting-entity-has-allegedly-been-hacked/) - Cling Botnet Exploits Realtek Jungle SDK (CVE-2021-35394, CISA-KEV) (https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html) - ClingSTUN IoT Botnet Abuses 24 Known Vulnerabilities (https://www.darkreading.com/iot/clingstun-vulnerable-iot-devices-proxy-nodes) - ClickFix Campaign Leverages Browser Cache for Payload Delivery (https://thehackernews.com/2026/10/clickfix-smuggles-payloads-through.html) - RMM Tool Action1 Abused in Phishing Campaign (https://isc.sans.edu/diary/rss/33400) - Warlock Ransomware Exploits SharePoint Vulnerabilities (https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html) - Denmark CPR Register: 8.8 Million Records Accessed via Compromised Company Account (https://thehackernews.com/2026/10/denmark-says-attackers-accessed-cpr.html) - U.S.-Bound Oil Tanker Propulsion System Breached by Hackers (https://databreaches.net/2026/10/05/hackers-breached-propulsion-system-of-u-s-bound-oil-tanker/) - Microsoft Exchange CVE-2026-96940 Mailbox Access Vulnerability (https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html) - AI-Driven Attacks Accelerating Exploitation Timelines (https://www.darkreading.com/cyber-risk/ai-attacks-security-strategies) - Chinese APT TA419 Impersonates U.S. Officials to Target AI Policy Experts (https://www.darkreading.com/cyberattacks-data-breaches/chinese-actor-impersonates-us-officials-cyber-espionage) - Rejetto HFS CVE-2026-61500 Under Active Exploitation (https://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/) - Apple Muse and ChatGPT Mac Apps Had Privilege Escalation Vulnerabilities (https://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.html) - Windows 11 Market Share Reaches 71.5% as Windows 10 ESU Costs Double (https://www.theregister.com/os-platforms/2026/10/05/windows-11-market-share-creeps-upwards-as-cost-of-staying-on-windows-10-set-to-double/5300870) - KVM Hypervisor Guest-Host Escape Zero-Day Claimed (https://www.theregister.com/offbeat/2026/10/06/security-researcher-claims-they-found-kvm-guest-host-escape-flaw/5301267) - FortiMail CVE-2026-104286 (CVSS 9.8) - Active Exploitation Confirmed (https://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.html) - Apple CoreGraphics CVE-2026-86950 Memory Corruption (CISA-KEV) (https://research.checkpoint.com/2026/5th-october-threat-intelligence-report/) - Windows 11 26H2 AC-3 Audio Decoder Issue (https://www.theregister.com/os-platforms/2026/10/06/windows-11-26h2-blighted-by-new-audio-issue/5301267) - UK Education Provider Bromcom SSO Data Breach (https://www.theregister.com/security/2026/10/06/legacy-sign-on-service-comes-back-to-bite-school-software-provi ...