IT Security News Roundup: 2026-09-27

IT Security News: today roundup

1. Five major security awareness platforms were evaluated for personalization capabilities.
2. Citrix confirmed active zero-day exploitation of two critical NetScaler flaws.
3. Emergency Citrix updates patch two actively exploited NetScaler RCE zero-days.
4. Kiteworks warned clients to shut down servers following imminent threat intelligence.
5. Researchers revealed a Windows process injection technique bypassing traditional EDR monitoring.
6. Security Affairs released its first newsletter focusing on AI-driven cybersecurity developments.
7. Europol arrested six individuals involved in a European migrant smuggling ring.
8. Wireshark updated its network analyzer to patch 19 security vulnerabilities.
9. New Windows botnet x47.c drains victim AI credits using stolen keys.
10. Security Affairs published new research covering GitHub malware and ransomware tactics.
11. Bitget raised stolen funds total to $387.5 million and offered bounties.
12. Security Affairs published weekly analysis covering unauthorized OpenAI access and ransomware forums.
13. A former U.S. soldier was sentenced for hacking telecommunication networks and extortion.
14. A Kosovo man pleaded guilty to operating the Rydox cybercrime marketplace.
15. CISA added an actively exploited Microsoft SharePoint vulnerability to its catalog.
16. Unpatched NetScaler zero-days prompted organizations to take vulnerable appliances offline.
17. Help Net Security summarized recent events including massive breaches and malware threats.
18. Forensic investigations revealed undisclosed Citrix NetScaler vulnerabilities exploited in real-world attacks.

Sources in this roundup

Most-mentioned keywords

Sources

1. Best Security Awareness Platforms for Personalized Employee Training
2. Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
3. Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack
4. Kiteworks Urges 6-Hour Server Shutdown Over Potential Zero-Day Attacks
5. New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory
6. SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
7. Six arrests for smuggling migrants via Schengen airports
8. Wireshark 4.6.9 Released, (Sun, Sep 27th)
9. x47.c Windows Botnet Uses xAI Grok for Persistence and AI Credit Draining
10. SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116
11. Bitget Hack Climbs to $387.5 Million as Exchange Launches Recovery Bounty and Points to North Korea
12. Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
13. Hacking and Extortion Operation Targeting U.S. Official Ends in Conviction
14. Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools
15. Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
16. Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
17. Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
18. Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks