The link you clicked points at a different website. We do not run that site and we cannot promise anything about what is on it. If you still want to go there, the button below opens it in a new tab.
This morning we started seeing exploitation for CVE-2026-8452 (Citrix Netscaler PreAuthRCE). The attackers were dropping a web shell named "x.php" and "z.php", and running discovery commands, like "id" and "echo". So far we have seen three unique IPs, from three different
If the address looks unfamiliar, close this tab and use the navigation above instead. TorPortal does not endorse third party sites and links inside news stories come straight from the source article.
