Today's cybersecurity landscape is marked by critical vulnerability disclosures and active exploitation, urging immediate action from system administrators. Several high-profile software products are affected by zero-day threats, underscoring the constant need for vigilance and timely patching.
Two Citrix NetScaler Zero-Days Under Active ExploitationVulnerability
Citrix has confirmed that two critical remote code execution (RCE) vulnerabilities in its NetScaler ADC and NetScaler Gateway products are currently being exploited in the wild. These zero-day flaws affect multiple deployments, with one impacting even default configurations, posing a significant risk. Citrix has released security updates to address these issues, alongside six other vulnerabilities.
Why it matters: If your business uses Citrix NetScaler products, prioritize applying these critical updates immediately to prevent potential remote code execution and compromise of your systems.
Read more at The Hacker News ↗
Cloudflare Patches Data Exposure Flaw in Container ServicesVulnerability
Cloudflare has addressed a vulnerability within its Containers and Sandboxes offerings that could have led to customer data exposure. The flaw allowed users with a Workers Paid account to potentially access residual data from other customers' containers sharing the same physical host.
Why it matters: While fixed, this incident highlights the importance of understanding the security assurances of cloud services and regularly reviewing your data's presence across shared infrastructure.
Read more at BleepingComputer ↗
Microsoft SharePoint Flaw Now Exploited in AttacksVulnerability
A previously identified Microsoft SharePoint vulnerability, tracked as CVE-2026-65660, is now being actively exploited in attacks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities Catalog, setting a deadline for federal agencies to apply patches.
Why it matters: Businesses using Microsoft SharePoint should ensure this vulnerability is patched without delay, as active exploitation significantly increases the risk of system compromise.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.