CyberNews: 27/09/2026 Edition

Today’s roundup

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Summary

Citrix confirmed on September 27 that two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway have been exploited in the wild as zero-days. It released fixes for both, along with six other flaws; one of the two affects every deployment on an affected version, including default configurations.

Ontinue linked the Psychedelic Stealer, spread through compromised Ukrainian websites with ClickFix-style fake Cloudflare checks, to Lunex, a wider malware-as-a-service platform. Its four-stage chain abuses an AMD driver to disable security monitoring and steals browser credentials from Ukrainian-speaking users.