The third CitrixBleed just dropped

NetScaler keeps leaking, and your identity edge keeps trusting it

On June 30, watchTowr disclosed CVE-2026-8451 in Citrix NetScaler. It is a pre-authentication memory leak. An attacker sends a malformed SAML request to an appliance acting as an identity provider. NetScaler reads past its buffer and spills memory into the response. That memory can hold live session tokens. CyberScoop called it the third CitrixBleed-class flaw. Honeypot sensors logged exploitation attempts within a day.

This is not a one-off. The original CitrixBleed hit in 2023. A sibling flaw, CVE-2026-3055, surfaced in March and already sits in CISA's exploited-vulnerabilities catalog. Now 8451. Same appliance. Same class of bug. watchTowr's researcher put it plainly: memory management "continues to appear fragile" inside NetScaler. The box sits at your front door and keeps handing out the keys.

The reflex is to patch and move on. Patch, yes. But the deeper problem is architectural. NetScaler is a monolithic appliance doing authentication for the whole enterprise. When it leaks, it leaks session tokens, and those tokens skip the login screen entirely. MFA does not save you. The 2023 original put attackers inside Boeing, ICBC, and DP World within weeks. One box at the identity edge is one point of catastrophic failure.

Your peers already see this. This week the network showed members re-shopping identity and privileged access by name. Machine identity, agent identity, and the edge that fronts them are all in play. CitrixBleed 3 is the exogenous event that explains the spending. The question is not "did we patch NetScaler." It is "should our identity gateway be one appliance an attacker can read the memory of."

Do two things before the long weekend. First, confirm no NetScaler runs as a SAML identity provider unless it is on 14.1-72.61, 13.1-63.18, or later, and rotate sessions after patching, because a token stolen before the patch still works. Second, name who is on call. Attackers treat holiday weekends as a running start, with defenders away and response slow. The last Fourth of July at this scale was the 2021 Kaseya ransomware attack, which reached hundreds of organizations over the weekend. Then put the appliance on your identity re-architecture agenda, not just your patch queue. The vendors your peers are evaluating are pitching exactly this gap.

The data in this issue came from priority submissions by 5,000+ enterprise IT leaders. If you run IT or security at a $100M+ company and want to see what your peers are funding — and earn rewards for participating in vetted meetings with the vendors worth your time — apply to join DoGood.

Patch SharePoint before the July 4 deadline

CISA added CVE-2026-45659 to its Known Exploited Vulnerabilities list. It is a remote code execution bug in on-prem SharePoint, rated 8.8. Microsoft shipped the fix back in May. Attackers are now hitting the servers that never got it. Federal agencies have until July 4 to apply it. That deadline falls on the Saturday of the holiday weekend, so the real cutoff is end of day Thursday, before your team is gone. If you run SharePoint Server 2016, 2019, or Subscription Edition and deferred the May update, this is your reminder that "patched by the vendor" and "patched in your environment" are two different sentences. Move it to the front of the queue.

AI agents can be hijacked by a single tool description

New Microsoft research shows an attacker can take over an AI agent with nothing but a poisoned tool description. The agent reads the instructions, trusts them, and quietly hands company data to an outsider. No breach of the model. No stolen credential. Just text the agent was told to trust. The industry response this month is "Agent Zero Trust." Google DeepMind and Anthropic both published frameworks that treat agents as potential insiders, with scoped identities and runtime monitoring. If you are piloting agents, scope what each one can touch now, before the pilot becomes production.

Adobe patches seven flaws rated a perfect 10

Adobe released fixes for ColdFusion and Campaign Classic. Seven of the flaws carry a maximum severity score of 10 out of 10. They allow arbitrary code execution and privilege escalation. ColdFusion is the kind of software that runs quietly in the back of an enterprise until it becomes the way in. Attackers have a long history of hunting unpatched ColdFusion servers. If you have any in production, or think you might, treat this as patch-now, then go find the ones nobody remembered.

219 cybersecurity M&A deals closed in the first half of 2026. Momentum Cyber's mid-year report, out July 1, calls it the highest deal count it has ever tracked. But the disclosed value was only $9.1 billion. That gap is the story. Accenture's move this week to buy Dragos, runZero, and NetRise was worth $4.175 billion on its own. One deal accounts for nearly half of the entire half-year's disclosed value. The rest is a long tail of quiet absorption, point solutions getting swallowed. For a CIO, that means the niche security vendor in your stack is a likely acquisition target. Expect re-papered contracts, price changes, and roadmap drift. Consolidation is not coming. It already runs the market.

This week the DoGood network watched members re-shop identity and privileged access by name. CitrixBleed 3 is a large part of why. The vendors solving the identity edge are the ones your peers are already booking meetings with.

The CXO Brief is powered by the DoGood network, 5,000+ IT leaders sharing what they are actually working on.

Know a CIO who needs this? Forward it and they can subscribe here.

Enterprise IT leader at a $100M+ company? Apply to join DoGood.