TrustList daily digest · Tech and security

Sunday, 4 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security3

1Security advisories
NetScaler SAML zero-day CVE-2026-88779: check Gateway and AAA SAML configurations and upgrade to 14.1-73.41 or 13.1-64.28
A new NetScaler flaw, CVE-2026-88779, affects Gateway and AAA deployments that use SAML and was exploited before a fix. Citrix says it is separate from last week's CTX697096 flaws; patched builds were released on 4 October.
2Security advisories
AWS Loom for AWS agent orchestration: three CVEs including an authentication bypass, upgrade to 1.7.0
AWS bulletin 2026-124 fixes three flaws in Loom for AWS, its open-source AI agent orchestration platform: an authentication bypass giving full admin control where no identity provider was set, and two credential-leaking request flaws.
3Security advisories
AWS SageMaker Distribution CVE-2026-104019: code execution in Unified Studio Spaces, end-of-support versions left unfixed
AWS bulletin 2026-125 fixes a flaw in SageMaker Unified Studio Space start-up that could run code in another project member's Space. Supported images are patched on restart; 2.8–2.13 and 3.3–3.8 are end of support and get no fix.

TrustList Weekly

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.