(Adobe Stock)

(Adobe Stock)

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Steve ZurierSeptember 30, 2026

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
AI/ML
One gateway to govern them all: Bringing enterprise AI under control
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation

PODCASTS

Leadership
Defending at AI Speed as Quantum Threats and AI Policies Won’t Save You – Nolan Karpinski – BSW #467
Vulnerability Management
Venus in Furs, Money Laundering, AI Hijinx, MCP, Thunderbastard, and Aaran Leyland – SWN #620
Application security
Going From Bug Bounty Bugs to More Secure Systems – Shlomie Liberow – ASW #402
Phishing
Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478
Vulnerability Management
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet – SWN #619

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

(Credit: Tada Images – stock.adobe.com)

Malicious ChatGPT Custom GPTs lead to ClickFix attack

Laura FrenchSeptember 30, 2026

Instructions to visit a malicious website were delivered through the real ChatGPT site.

SC Awards Celebrate 30 Years of Recognizing the People and Technology Advancing Cybersecurity

Kelley DamoreSeptember 29, 2026

57% of security execs report challenges with onboarding entry-level staff

Steve ZurierSeptember 29, 2026

SkillBit survey says security teams struggle to find and train new staff as AI compresses the time they have to patch new bugs.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Citrix sign on its office building in Fort Lauderdale, Florida, USA, an American cloud computing and virtualization technology company.

Patch/Configuration Management

CISA warns organizations to patch 2 critical Citrix NetScaler RCEs

Steve ZurierSeptember 28, 2026

Federal agencies are told to make the patches by this Wednesday

Island’s Michael Leland: Owning the teamwork

SC StaffSeptember 28, 2026

The importance of giving responsibility to -- and taking responsibility for -- your team.

Digital login interface with data network connections and abstract code

Was the Australia health portal incident a misconfiguration error?

Steve ZurierSeptember 25, 2026

Questions emerge over whether a reported AI hack was actually a basic government portal misconfiguration.

Security Operations

Kiteworks warns customers to shut down servers due to possible imminent attack

Laura FrenchSeptember 25, 2026

Kiteworks’ CISO cited “credible threat intelligence from law enforcement” for the urgent alert.

Events