Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
2026-10-04T08:51:39Z•11f6e378a718011e6f276e124d86cfcfbff8c4a03fee73bd0c2710b506c95bf8
CVE-2026-104286CVE-2026-88771CVE-2026-88772AI securityAndroid spywareChinese espionageCitrix NetScalerFortiMailKillSecTA419actively exploited vulnerabilitycloud securitycredential theftdata poisoninginsider threatpath traversalphishingransomwareremote code executionzero-day
What happened
Weekly cybersecurity roundup covering actively exploited FortiMail and Citrix NetScaler vulnerabilities, suspected Chinese espionage phishing against AI policy experts, ransomware and insider-threat activity, AI-enabled attacks, and defensive security developments. The most urgent items are the in-the-wild FortiMail zero-day CVE-2026-104286 and reportedly exploited Citrix NetScaler RCE zero-days CVE-2026-88771 and CVE-2026-88772.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 11f6e378a718011e6f276e124d86cfcfbff8c4a03fee73bd0c2710b506c95bf8
- Enrichment time
- 2026-10-04T08:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.