⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

This week's roundup opens with two actively exploited zero-days: Citrix patched CVE-2026-88779, a memory overflow in NetScaler ADC and NetScaler Gateway (CVSS 8.7) affecting SAML-configured deployments, while CISA flagged CVE-2026-104286 in Fortinet FortiMail, a critical unauthenticated arbitrary file write bug (CVSS 9.8) already under attack. Law enforcement also struck back, arresting two alleged ShinyHunters members and a 16-year-old suspected of running the KillSec ransomware operation, which Europol says launched roughly 1,000 attacks since 2024. Elsewhere, researchers disclosed a new Spectre v2 variant called Branch Target Reuse that can extract a Linux root password hash from Intel CPUs within minutes, Storm-3168-linked activity and other campaigns kept exploiting weak defaults across Linux kernel, GitLab AI Gateway and Cisco Catalyst SD-WAN Manager, and a report found AI coding agents had inadvertently leaked over 13,000 internal screenshots from hundreds of companies onto public GitHub repos. The recap also lists a long tail of fresh CVEs across vendors like Apple, Intel and GitLab, underscoring how fast unpatched flaws are being weaponized.