SecPoint

Citrix NetScaler security alert: two actively exploited vulnerabilities

Citrix has confirmed exploitation of CVE-2026-88771 and CVE-2026-88772 in unmitigated NetScaler deployments.

The first can allow unauthenticated command ex*****on. The second can lead to remote code ex*****on or denial of service when DTLS is enabled.

SecPoint Penetrator includes assessments for both CVEs to help identify potentially affected NetScaler systems and prioritize remediation.

Review exposed gateways, apply the appropriate Citrix updates and investigate possible compromise.

https://www.linkedin.com/products/secpoint-penetrator/

It was a pleasure welcoming Tor Ommund Ljosland from SecureNOK AS to SecPoint yesterday.

We had a great conversation about the latest cybersecurity challenges, including the growing importance of protecting operational technology, industrial systems and critical infrastructure against modern cyber threats.

It is always interesting to meet other cybersecurity professionals and exchange experiences, ideas and perspectives on where the industry is heading.

Thank you for the visit, Tor. Great meeting you!

Great meeting with Øyvind Sørbu from the Norwegian Cybersecurity Cluster during his visit to SecPoint yesterday in Copenhagen.

We had a very interesting discussion about the latest developments in cybersecurity, emerging threats, innovation, and the importance of stronger collaboration across the Nordic cybersecurity industry.

Always valuable to exchange ideas and perspectives with people working to strengthen the cybersecurity ecosystem in our region.

Thanks to CenSec - Center for Defence, Space & Security for making the connection.

Thank you for visiting SecPoint, Øyvind. It was a pleasure meeting you!

Zammad security alert: session hijacking and remote code ex*****on

CVE-2026-102489 concerns session hijacking that can lead to code ex*****on as the Zammad service account on affected older installations. DIVD reports exploitation in a real incident.

Zammad states that version 7.0 and later are not exploitable through this issue and recommends upgrading to 7.2.0.

SecPoint Penetrator includes an assessment for CVE-2026-102489 to help identify potentially affected systems and prioritize upgrades.

Review exposed helpdesk systems and investigate signs of compromise.

SecPoint Protector V70 and Penetrator V69.1 October 2026 Software Images Available

The October 2026 software images for SecPoint Protector and SecPoint Penetrator are now available in the SecPoint VIP Lounge.

This release continues our focus on stronger security, expanded vulnerability coverage, improved visibility, reporting, and platform stability.

Key highlights:
Protector V70: Maintenance, usability, and stability improvements.
Penetrator V69.1: Extended API Checks, expanded hypervisor checks, improved MFA and SSO detection for web login services, and expanded checks for remotely exposed management interfaces.

Updated Virtual, Proxmox and Raw Linux images.

Access the latest releases in the SecPoint VIP Lounge:

https://vip.secpoint.com/

SecPoint Penetrator V69.1, Expanded API Security

We have further strengthened the API security capabilities in SecPoint Penetrator V69.1.

The latest version includes 100+ dedicated API security assessments with expanded coverage of REST/JSON, GraphQL, SOAP/WSDL, OData, gRPC-related services, OpenAPI/Swagger and exposed management APIs.

The assessment is performed remotely against reachable services and APIs, with bounded and non-destructive testing.

Part of our continued development of SecPoint Penetrator to provide deeper visibility across modern IT environments.

Download the latest SecPoint Penetrator software images for October 2026: https://vip.secpoint.com

Great to meet Aleksandar Manjgotic again during The Future of Cybersecurity 2026 in Nicosia, Cyprus 🇨🇾

Cybersecurity events are also about bringing people together, exchanging experience and strengthening cooperation across the industry.

It was a pleasure catching up during the event organized by Data Ally and discussing the evolving cybersecurity landscape.

Looking forward to continuing our cooperation and meeting again soon.

A pleasure to meet Andreas Michael again during The Future of Cybersecurity 2026 in Nicosia. 🇨🇾

Thank you Andreas and the entire Data Ally team for the invitation, the excellent organization and the continued cooperation with SecPoint.

Events like this create an important opportunity to bring cybersecurity vendors, partners and IT professionals together to discuss real security challenges and the technologies being developed to address them.

We look forward to continuing and strengthening the cooperation between SecPoint and Data Ally.

Cyprus

🇩🇰 Today is Uniform at Work Day in Denmark

Today, 30 September, Denmark celebrates Uniform på jobbet-dag, recognising the reservists and volunteers who combine their civilian careers with service for Denmark’s defence and emergency preparedness.

At SecPointnt, we are proud to be a member of InterForce Danmark and to support the people who make this additional commitment to our shared security.

In a time of increasing cyber threats and risks to critical infrastructure, resilience depends on strong cooperation between businesses, defence and emergency services.

A special thank you to all reservists and volunteers serving with Danish Ministry of Defence, Hjemmeværnet and Beredskabsstyrelsen for the contribution you make alongside your civilian work.

The Future of Cybersecurity 2026 – Nicosia, Cyprus 🇨🇾

SecPoint had the pleasure of taking part in The Future of Cybersecurity 2026 in Nicosia.

It was a great opportunity to meet cybersecurity and IT professionals, exchange perspectives on the evolving threat landscape, and discuss how organizations can strengthen their security and cyber resilience.

Thank you to Data Ally for organizing the conference and bringing the cybersecurity community together, and to Katerina Manolidou for opening the event.

A very productive day of cybersecurity discussions, demonstrations and new connections.

Cyprus Nicosia