Citrix patches NetScaler SAML zero-day exploited in attacks

BleepingComputer reports multiple October 2026 cybersecurity developments, including active exploitation of critical zero-day vulnerabilities in Citrix NetScaler and Fortinet FortiMail, a critical GitLab AI Gateway remote-code-execution flaw, maximum-severity Dell Kubernetes storage vulnerabilities, ransomware activity exploiting SharePoint, and significant data breaches affecting universities and education-sector organizations. The most urgent items involve internet-facing appliances under active attack and vulnerabilities enabling arbitrary code execution or administrative access.