Top 5 Cybersecurity News

Top 5 Cybersecurity News October 2, 2026: Cisco SD-WAN zero-day, WSO2 CVSS 10 auth bypass, Citrix backdoors persist, Apple CoreGraphics exploit, GUTcert breach.

This week’s Top 5 Cybersecurity News for October 2, 2026 follows a pattern that has been building across the year: attackers are targeting the layers that other infrastructure trusts. A critical-severity zero-day in Cisco’s SD-WAN Manager — the console that programs an entire enterprise WAN — arrived in CISA’s Known Exploited Vulnerabilities catalog on September…

Read More

Citrix NetScaler unauthenticated RCE vulnerability

Citrix NetScaler unauthenticated RCE vulnerability lets attackers run commands with no login. Two zero-days exploited, patch now, CISA deadline Sep 30.

Citrix confirmed on September 27 that a Citrix NetScaler unauthenticated RCE vulnerability, tracked as two separate CVEs, was already being exploited in the wild before any patch existed. CVE-2026-88771 lets an attacker with no credentials run arbitrary commands on any NetScaler ADC or Gateway appliance in a vulnerable version, default configuration included. Its sibling flaw,…

Read More

June 2026 Cybersecurity Roundup: Supply Chain Breaches, Data Extortion, and Critical CVEs

June 2026 Cybersecurity Roundup

This June 2026 Cybersecurity Roundup lands in a month when the FIFA World Cup kickoff dominated the conversation, with most attention on cyber threats and fraud tied to the tournament. Away from the headlines, though, June’s most consequential incidents ran through SaaS supply chains, ransomware-driven data extortion, and identity compromise. Here’s a roundup of the…

Read More