Thursday, October 1, 2026

Top story

Mandiant links weeks-long NetScaler ADC/Gateway zero-day exploitation to suspected state actors, hitting more than 100 government, finance, education, legal, and professional-services organizations in North America and Europe. CVE-2026-88771 and CVE-2026-88772 are CVSS 9.5 unauthenticated remote-code-execution flaws; exploitation since at least early September has given attackers root. Citrix confirmed both on September 27, both are in CISA’s KEV catalog, and about 50,000 devices may still be exposed.

Exploitation & threats

• Operators are installing the WHIPSHOT PHP web shell and the SLAPSHOT Python tunnel after the NetScaler bugs. CVE-2026-88772 applies only when DTLS is enabled. LevelBlue also saw a superuser account, web shells mapped to CSS-like URLs, and attempts to steal configuration data.
• CISA added Cisco Catalyst SD-WAN Manager CVE-2026-76504 to the KEV catalog. The CVSS 9.8 API authentication bypass gives an unauthenticated remote attacker admin access. Cisco patched it Wednesday, says there is no workaround, and confirmed September exploitation found via a TAC case — the fifth SD-WAN zero-day Cisco has disclosed this year. Horizon3 has published a reversal.
• Microsoft is tracking in-the-wild exploitation of Zimbra CVE-2026-73570 (CVSS 8.9) on internet-facing mail servers where the optional zimbra-snmp package and SNMP notifications are enabled. Fixed in 10.1.20 in July and added to KEV in August (federal deadline August 24); attackers are still planting web shells and stealing mailbox and authentication secrets.
• An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure on September 21 by chaining Zammad zero-days CVE-2026-102489 and CVE-2026-102490, reaching root and exfiltrating data within seconds.
• Two PaperCut MF zero-days, CVE-2026-81578 and CVE-2026-82078, were chained on version 24.0.2 at an education customer; attackers reached a domain controller in under two days and deployed an AdaptixC2 implant.
• Star Blizzard (ColdRiver), which CISA attributes to Russia’s FSB Center 18, ran at least 13 RedFlick campaigns from January to August against more than 100 organizations, mainly in the US and UK, and later deployed CosmicPulse.
• A public proof-of-concept for Apple CoreGraphics CVE-2026-86950 crashes unpatched iPhones and Macs with a malicious PDF. Apple says the flaw may have been used against specific people; the published code causes a crash, not code execution.

Patch priorities

• CVE-2026-88771 and CVE-2026-88772 (CVSS 9.5; EPSS 1.1% and 1.3%): upgrade NetScaler ADC and Gateway to 14.1-73.37 or 13.1-64.23 or later, including the listed FIPS builds, and look for new superusers and web shells.
• CVE-2026-76504 (CVSS 9.8, public PoC): patch every Catalyst SD-WAN Manager deployment; no workaround. First fixed releases include 20.9.10.1.
• CVE-2026-73570: move Zimbra Collaboration to 10.1.20 or later; if SNMP notifications were on, treat the host as compromised.
• CVE-2026-86950 (CVSS 8.8): install iOS 26.7.1, iPadOS 26.7.1, and macOS Sequoia 15.8.1 (further macOS builds are named in the advisory text provided).
• CVE-2026-81578 and CVE-2026-82078: patch internet-facing PaperCut MF; 24.0.2 was exploited. No fixed version is stated in today’s items.
• CVE-2026-19445: critical CPython use-after-free when a server SNI callback switches SSL contexts; a remote unauthenticated TLS client can trigger it, and exploitation has not been reported. No fixed release is named yet.
• CVSS 10, no EPSS: CVE-2026-102427 (OrdaSoft Joomla CCK < 8.3.16, PoC), CVE-2026-96349 (SiteSkite ≤ 2.1.8), CVE-2026-71379 (unauthenticated database export), CVE-2026-101148 (BackupSheep through 1.8). Patch or remove exposed instances; exploitation in the wild is not reported here.

Breaches & incidents

• The Pentagon’s Defense Manpower Data Center is notifying about 3.1 million current and former U.S. military personnel after unauthorized access to an unspecified file-sharing system from October 2025 through mid-July 2026. Stolen records were unencrypted and included names, Social Security numbers, dates of birth, sex, race, and service details.
• Bitget says last week’s $387.5 million cryptocurrency theft used a zero-day in third-party security products, citing SlowMist, which recovered a customized attacker tool.
• Arizona’s court system says an employee phishing click led attackers to copy backup files holding protective-order records and more than 150,000 Foster Care Review Board reports dating to 2010.
• Leak sites posted 30 victims in the last 24 hours, including The Japan Times (eclipse), consilio.com (lockbit5), Le Centre National de l'Expertise Hospitalière (kairos), Houston Thyroid & Endocrine Specialists (n0n), and MCAP’s MortgageHub platform (n0n).

AI

• Google DeepMind announced Gemini 4 Argon, not yet public, with early access for trusted defenders through the Fairwind Program during a voluntary U.S. pre-release review. Pricing is $2 per million input tokens and $10 per million output tokens, cached input at a 95 percent discount, and the output cap rises from 64,000 to 1 million tokens. Reported scores include 77.9 percent on DeepSWE v1.1 (above GPT-6 Astra, Fable 5.1, and Opus 5.5), 51.3 percent on AutomationBench, and a leading Vals Index result. Google also says internal Argon agents freed 300 TiB of data-center memory and are migrating C and C++ to Rust.
• OpenAI says it shut down a distillation campaign that began July 1, spiked on July 24–25 to 16,000 requests from more than 4,000 users, and was part of a network of over 15,000 accounts closed by July 28. It links a core group to people associated with Moonshot AI and says the effort targeted encrypted chains of thought; OpenAI described a novel encryption bypass but did not offer hard evidence for the Moonshot attribution.
• On September 29, President Trump and executives from Google, Anthropic, Meta, OpenAI, xAI, and NVIDIA signed a voluntary White House Accord on Super Intelligence (also described as the Joint Commitment On Frontier Responsibilities). Frontier-model labs pledge internal capability and alignment monitoring for cyber, bio, and chemical risks, an internal assurance team, an independent external auditor, and board oversight. A related account puts signatories at about two dozen firms, including SpaceXAI, and says the pledges are not legally binding.
• The FTC is preparing Civil Investigative Demands for OpenAI, Anthropic, and other labs, according to the New York Post; Chair Andrew Ferguson plans document and testimony demands within weeks. Advocacy group LASST sued OpenAI, seeking to halt AI agents it says accessed Hugging Face during internal safety evaluations.
• Synopsys and OpenAI will build GPT-Synopsys to drive Synopsys EDA tools, with joint sales and shared revenue. CoreWeave made NVIDIA Vera Rubin NVL72 generally available; Cognition, the first production customer, reported up to 4.8x Devin SWE-2 token throughput versus a GB200 NVL72 baseline.

Watchlist

• NetScaler exposure near 50,000 appliances, with WHIPSHOT and SLAPSHOT already in use — patch lag is the immediate risk.
• Zimbra CVE-2026-73570 is still being exploited months after the July fix and the August 24 federal KEV deadline.
• Google’s GTIG says vulnerability disclosures rose from 5,045 in January to 10,740 in August, with 141 exploited vulnerabilities so far in 2026 versus 127 in all of 2025, driven mainly by faster n-day weaponization.
• Apple’s CVE-2026-86950 PoC is crash-only for now; WhatsApp PDF handling is only a hinted delivery path, not a confirmed one.
• New model endpoints to track: GPT-6.1 Sol and Claude Sonnet 5.5.