CISA Amplifies Critical Citrix NetScaler Vulnerabilities and Warns of Ransomware Exploiting SimpleHelp RMM

CISA has amplified the disclosure of eight new vulnerabilities (CVE-2026-88771 through CVE-2026-88778) affecting Citrix NetScaler ADC and Gateway products, adding two critical zero-day remote code execution vulnerabilities (CVE-2026-88771 and CVE-2026-88772) to its Known Exploited Vulnerabilities Catalog. Threat actors are actively exploiting these globally. Additionally, CISA released an advisory regarding ransomware actors exploiting unpatched SimpleHelp Remote Monitoring and Management (RMM) to compromise a utility billing software provider, part of a trend since January 2025.