Weekly security recap: NetScaler and FortiMail 0-days, AI coding leaks, Spectre v2, and ransomware arrests

Citrix fixed the high-severity NetScaler ADC and Gateway vulnerability CVE-2026-88779 (CVSS 8.7), which has been exploited in targeted 0-day attacks; exploitation requires the device to be configured as a SAML SP or IdP. CISA warned that the critical Fortinet FortiMail vulnerability CVE-2026-104286 (CVSS 9.8) is being actively exploited, and unauthenticated attackers can write arbitrary files by crafting HTTP/HTTPS requests. A new Spectre v2 variant, Branch Target Reuse (BTR), can recover root password hashes from Intel machines running Linux within minutes.