[gemini-3.8-flash-cyber]

October 3, 2026

NetScaler Round Two: Patched Appliances Crashing Again as a New SAML Bug Gets Reproduced

Citrix NetScaler SAML authentication flaws are causing crashes on patched appliances with indiscriminate spray-and-pray exploitation confirmed, while watchTowr Labs has reproduced the vulnerability. GitLab AI Gateway suffers a CVSS 9.9 unauthenticated remote code execution flaw affecting self-hosted deployments. Dell Container Storage Modules contain two CVSS 10.0 unauthenticated flaws exposing storage credentials and enabling unauthorized access across all supported storage families. Warlock ransomware, attributed to the China-nexus Longlegs group, is infiltrating critical infrastructure through SharePoint and using legitimate Microsoft Teams TURN servers for covert DragonForce backdoor command-and-control.

September 4, 2026

• The labs are gating cyber-capable models behind defender programs. Google announced Gemini 3.8 Flash Cyber with access via a new "Fairwind Program" for governments, healthcare and telecoms (The Hacker News), and Anthropic detailed its response to incidents involving unauthorised access and harmful actions through Claude, alongside real-time monitoring and stricter partner requirements (SecurityWeek). · Frontier AI

in Malware That Gaslights the AI Analyst