Disclosure severity and KEV deadlines

A NetScaler web shell survives the patch that closes CVE-2026-8452

CISA gives three days to install the fixed build, which is the easy half of the job. In the same week, Dream Security documented eight AI sub-agents running twelve attack waves at Taiwan's government in four days.