Citrix NetScaler Auth Bypass Under Active Exploitation

🕵️ RESEARCH & DEEP DIVES

• HelmGuard Raises $7.3 Million for Agentic GRC and Security — SecurityWeek

• Scans for Proxmox Servers, (Wed, Sep 9th) — SANS ISC

• FTC rescinds policy requiring health apps to notify customers after a breach — CyberScoop

• Lawmakers call on Treasury to sanction hackers-for-hire — CyberScoop

• Doctor Doom Thanked Seattle for All the Surveillance Cameras — 404 Media

• The Remnants of a Lost ‘Supercontinent’ Just Rewrote the History of Life on Earth — 404 Media

• Smear Campaign Says Anti-Flock Movement Is Chinese Propaganda — 404 Media

• NationalSecurityAgency/skills-service has Stored XSS via User Registration En... — CVE ThreatInt

• MaxSite CMS through 109.6 PHP Object Injection via ci_sessionMaxSite CMS thro... — CVE ThreatInt

• MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption KeyM... — CVE ThreatInt

• MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_pageMaxSite CMS vers... — CVE ThreatInt

• MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcherMaxSite CMS... — CVE ThreatInt

• Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrar... — CVE ThreatInt

• CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could c... — CVE ThreatInt

• Incomplete list of disallowed inputs in awslabs mysql-mcp-serverIncomplete li... — CVE ThreatInt

• A Vulnerability in SAP Extended Passport (EPP) Processing Could Allow for Remote Code Execution — CIS Advisories

• The state of AI for security: Measuring what matters most for building trust — AWS Security Blog

• Apple named their new comms thing C2, lols. — @GossiTheDog@cyberplace.social

• Watching this Apple event tout how iPhones will soon be able to record ambient audio/conversations and transcribe "high... — @zackwhittaker@mastodon.social

• KEV: CVE-2026-19490 — Citrix NetScaler — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — CISA KEV

• KEV: CVE-2026-20079 — Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability — CISA KEV

• KEV: CVE-2026-87491 — Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability — CISA KEV

• CRA Reporting Goes Live September 11: What Manufacturers Must Have in Place When the Clock Starts — securityboulevard.com (discovered)

• Podcast: BeaverTail and InvisibleFerret – The Malware That Rewrites Itself for Every Target — securityboulevard.com (discovered)

• Securing AI Agents at Runtime — securityboulevard.com (discovered)

• A New AI Vulnerability Exposes the Security Gap That PQC Won’t Fix — securityboulevard.com (discovered)

• Do Nontechnical Founders Still Need a Technical Co-Founder in the AI Era? — securityboulevard.com (discovered)