{
 "type": "bundle",
 "id": "bundle--df39a7a6-3102-40eb-b89c-17c0a6e06c66",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--dda27c44-0117-5591-abf6-2cffa8099661",
   "created": "2026-11-08T21:16:16.710Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "Citrix NetScaler Authentication Bypass CVE-2026-19490 Under Active Attack",
   "description": "Security firm Previdian reported that on 3 September 2026 one of its NetScaler sensors received requests matching public proof-of-concept code from three distinct source IPs geolocated to Australia, the United States and Germany. CVE-2026-19490 permits unprivileged remote attackers to bypass authentication on NetScaler ADC and Gateway appliances configured as AAA virtual servers or gateways, depending on firmware version and SAML Action configuration. Belgium's National Cybersecurity Coordination Centre issued a parallel warning, and more than 22,000 NetScaler ADC appliances are tracked as internet-exposed. Citrix released fixed builds in mid-August 2026.",
   "confidence": 50,
   "labels": [
    "other",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/citrix-netscaler-authentication-bypass-cve-2026-19490-under-active-attack/"
    },
    {
     "source_name": "source",
     "url": "https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-03",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "Government",
    "Financial Services",
    "Healthcare",
    "Technology"
   ],
   "x_securitystudies_eu_relevance": "high"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--982fc425-3b6a-5dbb-9934-af733bbc405c",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Australia",
   "country": "AU"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--e7883170-4258-5022-ac87-d26ac2502370",
   "created": "2026-11-08T21:16:16.710Z",
   "modified": "2026-11-08T21:16:16.710Z",
   "relationship_type": "related-to",
   "source_ref": "incident--dda27c44-0117-5591-abf6-2cffa8099661",
   "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--b3751652-d71d-531c-bcee-513adc9d0b87",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "United States",
   "country": "US"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--0b238368-454f-5156-bb93-34eeb86cd472",
   "created": "2026-11-08T21:16:16.710Z",
   "modified": "2026-11-08T21:16:16.710Z",
   "relationship_type": "related-to",
   "source_ref": "incident--dda27c44-0117-5591-abf6-2cffa8099661",
   "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87",
   "description": "country named in the coverage"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--985edf3b-bbdc-5fce-808b-4e4869bff566",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Germany",
   "country": "DE"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--39c557e8-6841-50a6-9a0a-9862dc0e6b56",
   "created": "2026-11-08T21:16:16.710Z",
   "modified": "2026-11-08T21:16:16.710Z",
   "relationship_type": "related-to",
   "source_ref": "incident--dda27c44-0117-5591-abf6-2cffa8099661",
   "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566",
   "description": "country named in the coverage"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--f8de1409-c8bc-547e-863c-07817401d9a2",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Belgium",
   "country": "BE"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--64580759-d4cc-58eb-8d86-aecc9f422b2d",
   "created": "2026-11-08T21:16:16.710Z",
   "modified": "2026-11-08T21:16:16.710Z",
   "relationship_type": "related-to",
   "source_ref": "incident--dda27c44-0117-5591-abf6-2cffa8099661",
   "target_ref": "location--f8de1409-c8bc-547e-863c-07817401d9a2",
   "description": "country named in the coverage"
  }
 ]
}