Week in review: FortiBleed is still active, Patch Tuesday forecast
CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.
Help Net Security’s weekly roundup highlights actively exploited enterprise flaws alongside malware and exposure findings. CISA added Citrix NetScaler CVE-2026-88779, a memory overflow that can crash ADCs and Gateways, to the Known Exploited Vulnerabilities catalog, while attackers began probing critical Atlassian Data Center bug CVE-2026-21589. Microsoft issued an out-of-band Exchange Server update for authenticated mailbox-read flaw CVE-2026-96940, and SonicWall patched pre-auth SSRF CVE-2026-102255 in SMA 1000 appliances. The digest also covers UAC-0099’s MATCHBOIL downloader against Ukraine, BPFDoor on edge devices, YouTube sponsorship phishing, and 8,547 internet-exposed wind and solar systems in 35 countries.