Hackers exploit Citrix NetScaler zero-day to deploy web shells

Threat actors are actively exploiting a zero-day vulnerability in Citrix NetScaler to deploy custom web shells and tunneling malware. The attack allows adversaries to achieve root access, harvest credentials, and pivot deeper into internal corporate networks. Administrators must apply available patches immediately and audit systems for indicators of compromise.