Enterprise

Technical coverage for enterprise IT and security teams.

Most important this week

CriticalAct nowExploitedCISA KEV

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

CISA added CVE-2026-88779 (Citrix NetScaler) to its Known Exploited Vulnerabilities catalog on October 4, 2026, which means there is reliable evidence of exploitation in the wild. Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.

Why it matters

CISA lists this as exploited in the wild. Unpatched NetScaler ADC / Gateway systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 5 sources

Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Cybersecurity Advisories
Original reportingBleepingComputer
Additional reportingSecurityWeek
Additional reportingThe Hacker News

2 days agoEnterpriseSecurity pros

HighReview

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.

Dark Reading8 hours agoEnterpriseDevelopers

HighReview

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.

SecurityWeek16 hours agoEnterpriseDevelopers

All Enterprise stories

8 hours ago

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

CriticalAct nowExploitedCISA KEVCISA Known Exploited Vulnerabilities5 sources

3 days ago

Enterprise

Most important this week

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

All Enterprise stories

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

Beta Channel Update for ChromeOS / ChromeOS Flex

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

tenfold CE: Our free Identity Governance tool just got 2 new features

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

TTY Logs and the Data it Captures, (Sun, Oct 4th)

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns

Chrome Dev for Desktop Update

Chrome Dev for Android Update

Warlock ransomware breach SharePoint in water, telecom operator attacks

Extended Stable Update for Desktop

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

Dell asks admins to patch max severity CSM flaws as soon as possible

Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Chrome for Android Update

Stable Channel Update for Desktop