Latest / Tech Talks With Kinsoft
Last Week in Tech - Citrix's Shut-It-Down Weekend, a Mail Gateway With No Patch, and the AI Price War Arrives
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
Last Week in Tech for Monday 5 October 2026, covering the week from 27 September.
Citrix NetScaler zero-days (27 Sep). CVE-2026-88771 (unauthenticated command execution, all deployments including default config) and CVE-2026-88772 (memory overflow, RCE when DTLS is on — the VPN default). Citrix: CVSS v4.0 9.5 for both. Fixed in 14.1-73.37, 13.1-64.23 and FIPS/NDcPP builds; 12.1 and 13.0 are end-of-life with no patch. CISA KEV 27 Sep, deadline 30 Sep. Mandiant: exploitation since at least 3…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.