TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8694
@thehackernews
The Hacker News
Post content
Post content
🚨 Attackers are probing Citrix NetScaler for CVE-2026-3055 (CVSS 9.3). Honeypots show requests to /cgi/GetAuthMethods to identify SAML IdP setups, which are required for exploitation. 🔗 How attackers are mapping vulnerable NetScaler targets → https://thehackernews.com/2026/03/citrix-netscaler-under-active-recon-for.html