Barrier-breaking signals

[first] ASCENT: First-Order Optimal Fine-Tuning with Recalibration for Safety--Utility Co-Enhancement

[first] Where Did the Repair First Go Wrong? Localizing the Origins of Silent Failures in Agentic Vulnerability Repair

[Citrix/NetScaler] Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.; required_action=Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updat

[Zammad GmbH/Zammad] Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.; required_action=Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes)

[Zammad GmbH/Zammad] Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.; required_action=Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Fo

Fortinet confirms unauthenticated file-write flaw in FortiMail email security gateway is being exploited with no patch available at disclosure time. Second major Fortinet edge CVE of 2026.

[Fortinet/FortiMail] Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.; required_action=Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing

[Cisco/Catalyst SD-WAN Manager] Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.; required_action=Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Priori

CVE-2026-88771 in Citrix NetScaler ADC/Gateway escalates from targeted exploitation to mass attacks, continuing the pattern of edge-appliance CVEs driving sector-wide incident response.

CISA publishes Gunra ransomware advisory (AA26-222a) documenting double-extortion tradecraft targeting critical infrastructure, becoming the ninth distinct ransomware family CISA has issued dedicated guidance on in 2026.

Attackers reach internet-exposed Rockwell MicroLogix 1400, Siemens, and Schneider PLCs across 30+ Minnesota community water systems in a coordinated Jul 26-27 campaign, forcing manual operation and boil-water notices.