This week's Risk Radar covers the French refrigeration cyberattack, another record Patch Tuesday, and a 61% rise in Q3 ransomware with triple extortion.
MDR
Solutions
Partners
About
Resources
.svg)
Citrix NetScaler Mass Exploitation, Cisco's 9.8 CVE & Revolut Breached Again
Published:
October 2, 2026
This week's Risk Radar: Citrix NetScaler vulnerabilities move from disclosure to mass exploitation in under 24 hours, Cisco's SD-WAN racks up its eighth vulnerability of the year with a critical 9.8 CVSS score, and Revolut discloses another data breach, this time rooted in a supplier's supplier rather than its own systems.
Citrix NetScaler Under Mass Exploitation
On Saturday, a security firm disclosed two separate attacks against Citrix NetScaler products, affecting both the ADC and Gateway lines. By Sunday, these exploits had already been adopted at scale by attackers, impacting thousands of deployments worldwide.
What to do:
Patch any NetScaler ADC or Gateway deployment immediately, rotate all associated accounts, and take a snapshot of your logs now for forensic analysis before evidence ages out.
Cisco SD-WAN's Eighth Vulnerability This Year
Cisco has confirmed its eighth SD-WAN vulnerability of the year, carrying a CVSS score of 9.8. This level of recurring critical findings in a single product line should already have patch cycles on a short leash.
What to do:
Upgrade to the patched release immediately. Hunt your logs for POST requests, particularly URL-encoded requests to the affected security-check endpoint, and cross-reference known indicators of compromise from the associated suspicious IP addresses.
Revolut Breached Again, This Time Through a Supplier's Supplier
Revolut has suffered another data breach, though not directly: a US-based data broker used by one of Revolut's suppliers was itself breached, exposing data belonging to Irish Revolut users, including phone numbers, email addresses, physical addresses and employer details. The timing was pointed, with our own Robert Kehoe speaking on third-party and supply chain risk at the Business Post Cybersecurity Summit in Croke Park just days earlier.
What to do:
Risk-assess and manage data flowing not just to your direct suppliers but to their suppliers in turn, and maintain a tracked inventory of every connection to your critical ICT providers.
Stay safe, and share this with your team.
Read Our Latest Blogs
.png)
Ransomware Up 61% in Q3, Microsoft Patches 1,411 Flaws, French Refrigeration Attack
How Silent Ransom Group steals data without encryption, and how to detect it
Silent Ransom Group steals data without encryption. Learn how the attack works and what to ask a 24/7 detection and response provider before you sign.
Citrix NetScaler Mass Exploitation, Cisco's 9.8 CVE & Revolut Breached Again
Citrix NetScaler flaws face mass exploitation within a day of disclosure, Cisco's SD-WAN scores its eighth CVE of the year, and Revolut is breached again via a third-party supplier.
