08-10-2026
Making sure the checks get printed
https://blog.talosintelligence.com/making-sure-the-checks-get-printed/
Report completeness: Low
Actors/Campaigns:
Warlock
Threats:
Supply_chain_technique
Victims:
Government, Water, Telecommunications, Education, Health care
Industry:
Telco, Healthcare, Education, Government
Geo:
Spanish, Spain, Portuguese, Danish
CVEs:
CVE-2026-88779 [Vulners]
CVSS V3.1: 7.5,
Vulners: Exploitation: True
Soft:
- citrix netscaler_application_delivery_controller (<13.1-37.282, <13.1-64.28, <14.1-73.41)
- citrix netscaler_gateway (<13.1-64.28, <14.1-73.41)
ChatGPT TTPs:
do not use without manual checkT1562.001
IOCs:
Hash: 10
File: 4
IP: 0
Domain: 0
Url: 0
Email: 0
BrowserExtension: 0
Soft:
KMSAuto
Algorithms:
md5, sha256