05-Oct-2026 Citrix Zero-Day, Anthropic Data, GitLab AI Flaw & ShinyHunters

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and decision-makers. Today’s briefing covers five developments shaping cyber risk: 1. Citrix NetScaler administrators face a new zero-day, CVE-2026-88779, just days after patching earlier exploited flaws. Attacks have reportedly caused appliance reboots and outages, while CISA’s rapid listing highlights the availability and potential access risks for organizations relying on ADC and Gateway systems. 2. The White House has appointed National Intelligence Director Jay Clayton to lead a federal AI task force. The move signals stronger coordination of AI policy and oversight, with implications for national security, regulation, and business competitiveness. 3. A suspected ShinyHunters member known as Rey has reportedly been detained in Jordan and is cooperating with authorities. The development could help investigators identify further members of an extortion network linked to more than 140 breaches and at least $70 million in payments. 4. Anthropic is asking some Claude users to opt in to sharing voice data for model training. The initiative highlights rising demand for real-world data while raising important enterprise questions about consent, storage, privacy, and governance. 5. GitLab researchers found a critical command-execution flaw in DeepSeek-Reasonix Studio that could run attacker-controlled code when developers opened a poisoned repository diff. Users should update to Studio 2.21.0 or npm package 1.39.3, as the issue underscores the risks of AI coding tools trusting local repository settings. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.