A new critical vulnerability has been discovered in Citrix NetScaler ADC and NetScaler Gateway products, the company announced Oct 8.
Cybersecurity

Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
Hospitals and health systems are playing a more complex and larger role in protecting patients, critical operations and sensitive health information from growing cyberthreats.
A joint advisory released Oct. 8 by U.S. and international agencies warns of Chinese government-linked cyber threat actors using automated and hands-on hacking tools to steal sensitive data from critical infrastructure organizations, including healthcare, across the U.S. and abroad. The advisory…
On October 8, 2026, Citrix disclosed a critical memory overflow vulnerability (CVE-2026-107406) affecting NetScaler ADC and NetScaler Gateway, assigning it a CVSS score of 9.5 out of 10.0.
H-ISAC TLP Green: Daily Cyber Headlines - October 9, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.
The National Security Agency Oct. 8 released guidance for critical infrastructure organizations that recommends adopting high-impact zero trust strategies to improve cybersecurity for operational technology.
H-ISAC TLP Green: Daily Cyber Headlines - October 7, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.
The FBI and Secret Service released an advisory Oct. 6 warning of ongoing activities by FortiBleed, a global credential-compromise campaign used by threat actors to target internet-facing Fortinet FortiGate firewalls and virtual private network gateways at critical infrastructure organizations.