Discover all our latest content

Citrix’s September 2026 security bulletin (CTX697096) resolves eight distinct vulnerabilities impacting NetScaler ADC and Gateway appliances, with severity scores ranging from CVSS 7.0 to 9.5. The bulletin is headlined by two actively exploited, maximum-severity zero-days. Because these edge devices manage remote access and hold highly sensitive cryptographic material in active memory, threat actors are leveraging these flaws to bypass authentication, harvest session tokens, and establish deep persistence within corporate networks.

BambooToken is a sophisticated, cross-platform malware framework that leverages the Message Queuing Telemetry Transport (MQTT) protocol to maintain stealthy command and control over compromised systems. Active and evolving over a three-year span the framework primarily targets mobile application backends, software supply chains, and enterprise networks.

"OVERPASS" is a maximum-severity (CVSS 10.0) memory corruption vulnerability located within the SAP Extended Passport (EPP) processing library. Because EPP is a shared core component used for system tracing, this flaw impacts a massive array of SAP systems. It allows unauthenticated remote attackers to completely bypass standard identity defenses and gain full administrative control over the underlying operating system and SAP business applications.