Citrix patches NetScaler SAML zero-day exploited in attacks

2026-10-05T01:23:22Z•5ba65f5d45564c74055772a0bff875ad178b6580cc764180bb16122203f423c3
CVE-2026-104286CVE-2026-88779AI-enabled attacksATM jackpottingCitrix NetScalerDell Container Storage ModulesFortinet FortiMailGitLab AI GatewayKubernetesSAMLSharePointWarlock ransomwareaccount takeoveractive exploitationbrowser securitycredential theftdata breachdenial of serviceidentity and access managementremote code executionzero-day

What happened

BleepingComputer security feed covering multiple October 2026 incidents, including actively exploited zero-day vulnerabilities in Citrix NetScaler and Fortinet FortiMail, critical GitLab AI Gateway and Dell CSM flaws, SharePoint exploitation by the Warlock ransomware group, major data breaches, account hijacking, ATM jackpotting, and emerging AI-enabled attack activity. The most urgent items involve internet-facing products with active exploitation and potential remote code execution or administrative compromise.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
5ba65f5d45564c74055772a0bff875ad178b6580cc764180bb16122203f423c3
Enrichment time
2026-10-05T01:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.