π Citrix patches NetScaler SAML zero-day exploited in attacks
A vulnerability worth acting on today π
Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
The Hacker News
X / Twitter 238/280
π οΈ Heads up, admins: A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html
π Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
A vulnerability worth acting on today π
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
π Source (The Hacker News): https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html
π οΈ Heads up, admins: Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnetβ¦
Patch fast β attackers already are.
#CyberSecurity #InfoSec
https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html
π Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
A vulnerability worth acting on today π
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel," Nozomi Networks said in a report
β‘ Why it matters: Patch affected systems promptly and confirm the fix actually applied.
Are your systems covered? What's your team doing about this? π¬
#CyberSecurity #InfoSec #VulnManagement #PatchNow #Malware
β Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
π Source (The Hacker News): https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html