MUST READ

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

 | 

WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

 | 

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

 | 

Three Million Affected in Pentagon Personnel Agency Data Breach

 | 

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

 | 

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

 | 

GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch

 | 

AI Accounts Are Becoming the New Target for Infostealers

 | 

Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure

 | 

Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities

 | 

U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

 | 

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

 | 

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

 | 

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

 | 

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools

 | 

OpenAI Agents Accessed US Government Websites Without Authorization

 | 

Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

 | 

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

 | 

SLAPSHOT

Pierluigi Paganini September 30, 2026
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

Mandiant and GTIG detail active exploitation of a Citrix NetScaler zero-day, deploying custom web shells WHIPSHOT and SLAPSHOT for root access. Mandiant and Google Threat Intelligence Group caught active exploitation of a zero-day in Citrix NetScaler ADC and Gateway appliances in late September 2026. The bug, tracked as CVE-2026-88772 (CVSS score of 9.5), has been […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

Security / September 30, 2026

WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

Security / September 30, 2026

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

Data Breach / September 29, 2026

Three Million Affected in Pentagon Personnel Agency Data Breach

Uncategorized / September 29, 2026

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

Hacking / September 29, 2026