Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services from www.theregister.com - Articles on 2026-09-29 17:49 (#78QEX) Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?