Citrix Patches Two Actively Exploited NetScaler Zero-Days Rated CVSS 9.5

·1 views

Citrix released advisory CTX697096 on September 27, 2026, fixing eight vulnerabilities in NetScaler ADC and Gateway, including two critical zero-days already being exploited in the wild. Security firm watchTowr had issued a public warning a day earlier, citing findings from a forensic investigation, while the Dutch national cybersecurity center privately advised some organizations to take affected appliances offline. Both zero-days — CVE-2026-88771 and CVE-2026-88772 — carry a CVSS v4 score of 9.5 and allow unauthenticated remote code execution on default configurations. CISA added both flaws to its Known Exploited Vulnerabilities catalog the same day, giving federal agencies only until September 30 to apply patches. Separately, Sidero Labs announced on September 14 that Talos Linux would gain native hypervisor capabilities, enabling unified management of containers and virtual machines through a single OS and API, with general availability targeted for December 2026.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Mojo: A High-Performance Programming Language Built for AI Systems

Mojo is a new programming language designed specifically for writing systems-level code optimized for AI workloads. It aims to combine high performance with usability for AI and machine learning development. One of its notable quirks is its unconventional file extension, which uses a fire emoji (.🔥). The language has drawn attention in developer communities for its focus on bridging the gap between AI research and low-level system performance. Developer Ekemini Samuel published an introductory overview of Mojo on DEV Community in August.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Databricks LTAP Architecture Proposed for Asia Real-Time Financial Markets

A private, invitation-only event called Hong Kong Databricks FSI Community Day 2026 is set to take place aboard a boat on Hong Kong Island waters, bringing together financial data professionals independent of Databricks corporation. The gathering will feature over thirty technical proposals addressing real-world financial architectures, including cross-border liquidity management and real-time streaming across Hong Kong and Singapore. One key session proposes an institutional LTAP (Lake Transactional Analytical Processing) architecture using Databricks Lakebase and Lakehouse to unify transactional applications with large-scale analytics under a single governed storage layer. Lakebase would handle low-latency transactional workflows such as trader watchlists and regulatory approvals, while Lakehouse would serve live market data queries to concurrent dashboards, APIs, and AI agents. Unity Catalog is central to the design, providing unified access control, data lineage, and audit capabilities across all workloads and jurisdictions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Microsoft Agent Framework Supports File, Class, and Code-Based Skills in C#

A developer and speaker at Build.AI 2026 has published a detailed walkthrough on implementing Skills within the Microsoft Agent Framework (MAF) using C#. Skills in MAF are focused capability sets defined through concise prompts and supporting scripts, enabling large language models to invoke specific functions. The framework supports multiple skill types, including file-based, class-based, code-defined, and MCP-based skills, with most scripts currently written in Python due to C# scripting limitations. MAF selects skills through a four-step process — advertise, load, execute, and respond — injecting skill descriptions into the system prompt for the LLM to reference. The post also contrasts Skills with Workflows, noting that Skills suit flexible, single-domain tasks while Workflows are better for deterministic, multi-step processes with real-world side effects.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

New Benchmark Tests If AI Models Know When to Admit They Can't Answer

A developer has created a 200-item benchmark called ESCALATE to measure whether AI models can recognize the limits of their own knowledge, not just whether they answer correctly. Each task includes a deliberate "unanswerable" scenario in roughly one in five items, where the only correct response is to escalate rather than guess. The benchmark spans four task types — routing, classification, judgment, and grounded question-answering — and scores models on both accuracy and false-confidence rate. The project compares frontier models hosted on Kaggle against small open-source models ranging from 1B to 8B parameters running locally on a single laptop. The author has pre-registered predictions before results are in, including the hypothesis that some small local models may show lower false-confidence rates than certain frontier models.

0 comments Read more at DEV Community