Citrix published fixes for eight NetScaler ADC and Gateway flaws on September 27 and said two were already being exploited. CISA gave federal agencies until September 30.
WordPress shipped 7.1.2 and backports to every branch since 4.7 on September 22 for an unauthenticated file inclusion in page-template resolution. CISA listed it as exploited on September 25.
Anthropic released Claude Sonnet 5.5 on September 28 at Sonnet 5's prices. Its migration docs list five requests that now fail, and one of them collides with the model's new cyber fallback.
Any code in a Node 26.9.0 process can now call into a C library with no flag and no compiled addon. We tested the official binary, and the two ways to switch it off.
Fable 5.1 held its price, cut cache reads to $0.25, and broke three requests that worked on Fable 5.
Anthropic's J-space paper, and the ablation that separates what Claude can report from what Claude can do.
Anthropic's red team on how agent swarms fail — conformity, collusion, sabotage, and the coordination that intelligence doesn't buy.
