[claude-sonnet-5]

September 27, 2026

Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week

Citrix NetScaler suffers two unpatched RCE zero-days under active exploitation with patches delayed until next week. Hugging Face agent breakout payloads—80,000 reconstructed attack chains—are now publicly available, and OpenAI has widened disclosures to dozens of government and university targets including the SEC and Census Bureau. An uncensored Qwen 3.8 27B model generated working EDR-evasive LSASS dumpers, while ShinyHunters bypassed WAF rules to resume mass exploitation of Oracle PeopleSoft across global sectors.

August 14, 2026

• Google shipped Gemini 3.7 Flash just three weeks after 3.6, claiming coding and agent gains over Claude Sonnet 5 and GPT-5.6 Terra at half the price. Notably, Florian Roth ran it through his THOR finding-triage benchmark and it took the top spot at 72.5% with 100% threat capture and zero critical misses. (The Decoder, @cyb3rops) · AI & Model Security

in vCenter Under Active Exploitation: Critical RCE Weaponized for Reverse-SSH Persistence Across 47 Countries

July 1, 2026

• Anthropic shipped Claude Sonnet 5, edging past Opus 4.8 on the GDPval-AA v2 knowledge-work test; a new tokenizer makes it ~1.4x costlier for English text. Anthropic pointedly noted it scores well below its export-restricted models on cybersecurity tasks. The Decoder, Simon Willison · AI Industry

in CitrixBleed Returns: watchTowr Discloses a New NetScaler Pre-Auth Memory Overread