⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

Summary: A critical input-validation flaw in Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-3055, CVSS 9.3) came under active exploitation as of March 27, 2026, and successful exploitation depends on the appliance being configured as a SAML Identity Provider. The same weekly roundup lists dozens of other high-severity flaws across QNAP, Google Chrome, TP-Link, NGINX, Node.js, BIND 9, Microsoft, and other products, and cites a Chainguard survey of 1,200 engineers and tech leaders in which 72% said time pressure blocks new feature work and 88% reported productivity loss from too many tools.
Why it matters: The one flaw already being exploited in the wild requires a specific configuration - SAML Identity Provider - so the question is whether anyone has checked which of your NetScaler appliances are set up that way. The roundup's own framing is that attackers are playing long games and the patches are almost always trailing.

Read the original at The Hacker News ↗