As cited
Copy frozen at (site build).
vulnerabilities
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors exploited a newly patched Citrix NetScaler ADC and NetScaler Gateway vulnerability to gain root access on appliances throughout September 2026. Mandiant and Google Threat Intelligence observed the activity deploying WHIPSHOT and SLAPSHOT malware, targeting government, financial services, technology, education, and legal and professional organizations in North America and Europe.
Why it matters: Organizations running unpatched NetScaler ADC or Gateway appliances face immediate risk of root compromise and malware deployment; administrators should prioritize patching and scanning for these malware signatures.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors exploited a newly patched Citrix NetScaler ADC and NetScaler Gateway vulnerability to gain root access on appliances throughout September 2026. Mandiant and Google Threat Intelligence observed the activity deploying WHIPSHOT and SLAPSHOT malware, targeting government, financial services, technology, education, and legal and professional organizations in North America and Europe.
Why it matters: Organizations running unpatched NetScaler ADC or Gateway appliances face immediate risk of root compromise and malware deployment; administrators should prioritize patching and scanning for these malware signatures.
- Source published
- First seen by Cybersecurity Tracker