
Citrix NetScaler: Patch First or Preserve Evidence First?
Two NetScaler zero-days are now in CISA's exploited catalog with a 30 September deadline, and installing the fix can erase the evidence you will need.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

Two NetScaler zero-days are now in CISA's exploited catalog with a 30 September deadline, and installing the fix can erase the evidence you will need.

Zenity Labs found three flaws in Salesforce Agentforce where a poisoned Web-to-Lead form leaked CRM data over DNS, with no login and not one click.

Blue Cross says AI coding tools added $942M to inpatient bills while ICU use and transfusions stayed flat. The proxy metric moved; the patient did not.

A hidden Elementor experiment let a query string switch off WordPress REST CSRF protection, so one clicked link could mint a new admin. Patched in 4.3.2.

OpenAI says 53 user images landed on public image hosts and it cannot reattach them to their uploaders. Consent to train is not consent to republish.

The Netherlands is testing Linux workstations, the EU is buying sovereign cloud, China is pulling a custom Windows 10 early. Replacing Windows is the easy part.

CARBONATO hijacks exposed Docker hosts, installs Hermes Agent, rewrites its persona, then drives them via Telegram. AI does post-exploitation, scripts spread.

third-party.com, the docs placeholder everyone copied, now serves ClickFix; 13 lookalike domains carry scams. Static checks miss all of it — audit your docs.

Cisco Talos found CLOSEDQUORUM, a Windows implant that lets DeepSeek, Qwen, Mistral and Gemini vote on what it does next, with no human C2 panel at all.

GitLab's "Email work item" address hides an account-wide token. Leak it and anyone can push to main, run CI jobs as you, and skip IP allowlists.

Claude Opus 5.5 ships Fable 5.1-class scores at roughly 40% lower cost than Opus 5, plus always-on thinking and safety rerouting to plan around.

AWS's Strands team shipped a batteries-included agent harness that reports 28% lower token cost than Claude Code and Codex at near-equal accuracy.