Late September, Citrix disclosed two critical vulnerabilities in NetScaler ADC and NetScaler Gateway, both scoring 9.5 on CVSS. One let an unauthenticated attacker run arbitrary commands on a default configuration, no special setup required. The other bypassed authentication and handed attackers root access. Both were exploited as zero-days, before any patch existed, and tens of…
We flagged this convergence back in July’s midyear review post. Q4 is when three things happen at once: the threat environment elevates, organizational attention and headcount contract for the holidays, and year-end compliance deadlines compete for the same stretched resources. The 2026 midterms land November 4, eight days after this post publishes, and Black Friday…
October is Cybersecurity Awareness Month. CISA’s 2026 theme is “Securing the Next 250,” tying the campaign to the country’s semiquincentennial and framing national cyber resilience as part of the broader infrastructure conversation. Most organizations will run their annual push this month: phishing simulations, an all-hands presentation, maybe a poster campaign. That’s useful, and it should…
There’s a version of board cybersecurity oversight that looks great on paper and doesn’t work at all in practice. The CISO presents to the board once a quarter. The slides have charts, metrics, and a risk heat map. The board nods, asks a few questions, and moves on to the next agenda item. Everyone checks…