Second NetScaler KEV in a Week, Atlassian and Dell Critical Flaws Demand Patching

Security leaders face a second Citrix NetScaler vulnerability added to CISA's KEV catalog this week, alongside a critical 9.3 CVSS Atlassian Data Center flaw affecting eight products and an out-of-band Exchange Server mailbox-access patch. Add a detained ShinyHunters suspect now cooperating with the FBI and new CISO appointments at ADM and SolarWinds-adjacent Cytactic, and it's a dense week for vulnerability management and leadership tracking.

Dell patches root-privilege flaw in System Update tool for PowerEdge servers

Dell is urging customers to patch CVE-2026-86360, a path traversal vulnerability with a 9.6 CVSS base score in Dell System Update, the tool IT administrators use to apply driver, BIOS and firmware updates to PowerEdge servers. An unauthenticated remote attacker could exploit the flaw to execute arbitrary code with root privileges, potentially leading to complete compromise of the application and underlying operating system. Dell also fixed four other high-severity DSU flaws and recommends upgrading to version 2.3.0.0 or later at the earliest opportunity. The advisory does not say whether any of the flaws have been exploited in the wild. (Help Net Security)

Microsoft rushes out-of-band Exchange Server fix for mailbox access bug

Microsoft pushed an out-of-band security update on October 5 fixing CVE-2026-96940, a high-severity Exchange Server vulnerability that may let authenticated attackers read emails and attachments of other users within the same organization, though not across tenant boundaries. The Exchange Server Team said it is not aware of active exploitation but warned the flaw could be consistently exploited, noting similar vulnerability types have been exploited previously. The update covers Exchange Server Subscription RTM, Exchange Server 2019 cumulative updates 14 and 15, and Exchange Server 2016 cumulative update 23; Microsoft recommends installing it across all Exchange servers and management tool clients promptly. (Help Net Security)

Detained ShinyHunters suspect reportedly cooperating with FBI after Jordan arrest

A suspected ShinyHunters member known as Rey, identified as Saif al-Din Khader, was detained in Jordan last week and is reportedly helping the FBI track down other group members, according to Reuters. A source said Khader is walking investigators through his electronic devices and digital correspondence. The arrest follows ShinyHunters' claimed breach of FBI job applicant portals via an Oracle PeopleSoft zero-day, with the group alleging it stole personnel files including medical information. The FBI said it continues to aggressively investigate the incident and has already worked with partners to arrest multiple subjects tied to the group. (Help Net Security)

ADM names Ruben D. Chacon as Vice President and Global CISO

ADM appointed Ruben D. Chacon as Vice President and Global Chief Information Security Officer, tasking him with strengthening cyber resilience and protecting critical technology assets across the company's global operations. Chacon joins from Eaton, where he served as Global Vice President and CISO leading cybersecurity strategy across a large manufacturing footprint. He previously held CISO roles at CDW and Constellation Brands, with earlier security leadership positions at Mondelēz International, The Coca-Cola Company and Kraft Foods Group. His appointment reflects the growing need to unify enterprise IT and operational technology security under industrial supply chain environments. (CXO Spotlight)

Former SolarWinds CISO Tim Brown named Chief Strategy Officer at Cytactic

Cytactic appointed former SolarWinds CISO Tim Brown as Chief Strategy Officer on October 6, bringing firsthand crisis-response experience to the incident response management vendor as it expands its platform. Brown led SolarWinds' response to the 2020 SUNBURST supply-chain compromise, covering technical containment, executive decision-making, customer communications and regulatory scrutiny. In his new role he will lead Cytactic's global strategy, product direction and strategic alliances, drawing on a survey the company cited in which 70% of 480 U.S. cybersecurity executives said internal misalignment caused more chaos during an incident than the threat actor itself. (Business Wire via Morningstar)