Bugs and Patches

Active Exploitation Alert: Zero-Day Vulnerabilities in Citrix NetScaler and Kiteworks Impact Critical Infrastructure (CVE-2026-88771, CVE-2026-88772)

Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing

The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I’m not optimistic. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Unidentified Flock Cameras in Florida

St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown.…

FortiMail Zero-Day CVE-2026-104286 Is Under Attack With No Patch Yet - International Business Times, Singapore Edition

FortiMail Zero-Day CVE-2026-104286 Is Under Attack With No Patch Yet International Business Times, Singapore Edition

Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited

GitLab patches the 9.9 CVE-2026-90970 vulnerability in its AI Gateway