Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CVE-2026-88779: Citrix NetScaler Zero-Day Exploited Against SAML Deployments
Excerpt
Only days after Citrix addressed actively exploited NetScaler flaws CVE-2026-88771 and CVE-2026-88772, defenders faced another urgent security issue. A newly disclosed vulnerability tracked as CVE-2026-88779 has been exploited in targeted attacks against customer-managed NetScaler ADC and NetScaler Gateway appliances configured for SAML authentication. Citrix rates the vulnerability as high severity with a CVSS v4.0 score of 8.7. The vendor describes it as a memory overflow…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-88779 | High | Score 79/100 | First seen |
| CVE | CVE-2026-88772 | High | Score 82/100 | First seen |
| CVE | CVE-2026-88771 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…