The Wave

1. 5d agoWiz ResearchCVE-2022-27518 exploited in the wild by APT5: everything you need to know | Wiz BlogWiz Research explains that NSA and Citrix report China-linked APT5 is exploiting the CVE-2022-27518 Citrix ADC/Gateway flaw, lists affected versions and fixes, and points customers to NSA hunting guidance.1 outletCyber3 linked
2. PAU4Oct 20Palo Alto Unit 42Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)Unit 42 updates its threat brief to report ransomware groups including Qilin and Inc exploiting the PAN-OS GlobalProtect bypass CVE-2026-0257, with attackers pivoting to vCenter and ESXi environments.1 outletCyber1 linked
3. PAU4Sep 30Palo Alto Unit 42Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)Unit 42 published a threat brief detailing pre-disclosure exploitation of Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 used to drop web shells, plus exposure counts from Cortex Xpanse.1 outletCyber2 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.