Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

The Hacker News - Oct 9, 2026

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said. The vulnerability

Read full article

More News

Oct 9, 2026

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.

Oct 9, 2026

What to Know About the Facebook Whistle-Blowing Case Depicted in ‘The Social Reckoning’

Aaron Sorkin’s sort-of sequel to the 2010 “Social Network” dramatizes a whistle-blowing case at Facebook. Here’s what to know.

Oct 9, 2026

US targets Microsoft, Adobe in new visa crackdown

The Trump administration continues to crack down on immigration, with new restrictions on the H-1B visa programme. US Vice President JD Vance singled out Microsoft as having abused the system to recruit low-cost foreign workers, to the detriment of the American workforce. The tech giant has defended its hiring practices. Also in the show: Germany could join a UK-led fighter jet development programme, months after pulling out of a joint French project.

Oct 9, 2026

China's FAST telescope finds rare triple-star system still evolving

Oct 9, 2026

Duetto acquires FLYR Hospitality to expand its platform and accelerate innovation for hoteliers

Duetto, a leading provider of revenue and profit software for hotels, today announced it has acquired FLYR Hospitality, a provider of automated revenue management and business intelligence for hotels. This expands Duetto’s Revenue & Profit Operating System to now include FLYR Hospitality’s AI-first revenue strategy platform, inclusive of its best-in-class business intelligence tool, and advanced AI capabilities. This bolsters Duetto’s already strong product suite that includes tools for revenue management, group business, AI-powered insights, and profit benchmarking (through HotStats, which Duetto acquired in 2025).

Oct 9, 2026

Pegasus Airlines invests in Zingly.ai to bring agentic voice AI to guest service

Pegasus Innovation Lab, which leads Pegasus Airlines’ innovation-driven transformation, has entered into a strategic partnership with Zingly.ai as both an investor and design partner to bring agentic voice AI to its guest service operations. The first use case is now live, marking the start of a phased roadmap that will run through mid-2027 and is planned to cover the top 10 guest service use cases, which account for the majority of relevant contact centre volume. Pegasus served approximately 43.3 million guests in 2025 across routes spanning Europe, the Middle East, North Africa, and Asia.

Oct 9, 2026

China state funds double down on Hua Hong in legacy chip push

Chinese state funds are ramping up support for the country’s second-largest contract chipmaker, pouring billions of yuan into the parent of Hua Hong Grace Semiconductor and a new manufacturing facility to fuel Beijing’s drive for self-reliance in mature-node chips. The capital blitz, spanning Hua Hong’s Shanghai-based parent company and a fabrication plant in Wuxi, highlights how government-coordinated financing is doubling down on domestic foundries, as Washington tightens technology...

Oct 9, 2026

Super El Nino event formed in September, Chinese climate center says

A super El Nino event officially formed in September 2026, according to monitoring data from China's National Climate Center.

Oct 9, 2026

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero

Oct 9, 2026

89% of guests want AI working behind the scenes, not running the front desk, Mews finds

New survey data released today by Mews, the operating system for hospitality, shows that as AI adoption in hotels accelerates, guest expectations are moving the opposite way - 89% of guests want either a hybrid stay blending AI and human service or AI operating quietly in the background on repetitive tasks. Almost none want an AI-led stay. 59% of guests believe AI should take over repetitive tasks so hoteliers can instead focus on building trust with their guests. At a time when AI adoption in hotels has never moved faster, guests have never been clearer that they still want a human at the center of the stay - not at every point in it.

Oct 9, 2026

168% rise in AI travel traffic shows brands must prepare before peak booking season

New data shows AI engaged sessions across travel websites are up 168% over the year, meaning travel business need to be AI-ready before the peak booking season takes hold. AI visibility preparation is now key as travellers are increasingly turning to AI to research, compare and plan holidays, according to IDHL’s State of AI Search report analysing 1.5 million AI engaged sessions across 175 websites.