Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
New Citrix NetScaler SAML Flaw Triggers Crashes and Suspected Exploitation Attempts
Excerpt
Citrix NetScaler administrators are reporting repeated appliance crashes and forced reboots after applying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now linked to a newly observed issue affecting SAML authentication deployments. The incidents have been reported on internet-facing NetScaler ADC and Gateway appliances running patched releases, including version 14.1-73.37. Multiple administrators said malicious or malformed…
Read the original report →Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-88772 | High | Score 82/100 | First seen |
| CVE | CVE-2026-88771 | High | Score 82/100 | First seen |
| MD5 | b160cbd4eef2625db160cbd4eef2625d | Medium | Score 53/100 | First seen |
| SHA256 | 2824be10929bdc604753c70a67a1c3312d8f34cc954092cc4403eed16fc993d9 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…