Action Retro just sat down with Pico Micro Mac v3, and the little board did the rare thing cheap retro kits keep promising. Power went in, a smiling Macintosh face appeared, and a real System desktop came up ready for a USB mouse. His video calls it a tiny 90s Macintosh. Software-wise it is closer to the 128K and Plus years. The charm is that the desktop is genuine, clickable, and running on a microcontroller you can cover with two fingers.

Matt Evans was the mastermind behind the emulator that makes this feat possible, and his pico-mac project, a Raspberry Pi Pico integrated with a 68000 Macintosh 128K, is a true marvel. It works by generating a one-bit VGA image using only a few resistors and the chip’s programmable I/O, which is then cranked up to 250 MHz, allowing you to play games like Missile Command without trouble. Ron from Ron’s Computer Videos then took this mess of wires and converted it into a board that you can really buy; Joe’s Computer Museum is selling the current v3 iteration for $20 to $25, either alone or with a Pico attached.

Apple 2026 Mac mini Desktop Computer M6 chip

• LITTLE DO-IT-ALL — Mac mini packs pure power into a small, five-by-five-inch desktop as the M6 chip delivers next-level AI capabilities. Mac mini…
• M6 CHIP — Everything you do on Mac mini feels more responsive with the M6 chip and its next-generation CPU. Fly through AI workflows with up to 4.8x…
• CONNECT IT ALL — Features three Thunderbolt 4 ports, an HDMI port, and a 2.5Gb Ethernet port in the back, and two USB-C ports and a headphone jack…

The older boards that came before this one required you to solder a separate microSD adapter onto a stack of pins, but the Version 3 has made life a lot easier by building the card slot right into the PCB and adding two rows of female headers, so you can simply press a Pico with pins already attached and it will work flawlessly. Simply press the boot button, slide a UF2 firmware file onto the Pico like a USB stick, and then drop Ron’s disk image onto a card, and you’re ready to go: VGA to any monitor that will accept it, keyboard and mouse via a micro USB OTG port. However, Action Retro discovered the hard way that some current keyboards with built-in hubs may be temperamental, so they switched to a simpler USB keyboard, which still worked.

The default personality is a 128K Mac at 512 x 342, Apple’s original canvas from 1984. Other firmware builds extend the picture to 640 × 480 and increase memory to 208K, which is more RAM than the first Macintosh ever arrived with. Finally, you get to see the Finder, MacWrite, and MacPaint in their full grandeur. Previous videos of this project have shown Lode Runner, Bricks, and Missile Command in action. With Ron’s compressed disk image, you can really utilize the system for the evening and have it do something.

One thing is lacking from this small project: sound. At least it is with the stock VGA board. The startup beep and classic square-wave chirps are available as an optional Audio Refit. Other capabilities such as SCSI, AppleTalk, and a printer connector are missing, and if you don’t have a card, the flash drive is read-only, which means your MacPaint doodles will disappear as you turn off the power. Some software still whines for more memory than you have, which is understandable given that you are running 1984 program on a few dollars worth of silicon.

Joe’s shop also sells a 3D printed shell from GutBomb that makes the entire device resemble a tiny beige Mac from the early 1990s, which is why the film has a 90s vibe, despite the fact that the ROM is older. Power comes from a phone bank or any 5V micro USB brick, and a little black and white VGA monitor sits next to it. Sometimes the wire is heavier than the computer. Official kits typically target the original RP2040 Pico. Joe and Ron do not support the Raspberry Pi Pico 2 boards.

If I got a dollar for every time someone asked me if this was the new iPhone Duo, I would have a dollar. And the Xiaomi 18 Fold.

I have spent some time with the Xiaomi 18 Fold, and my first impression is pretty simple: this is one of those phones that makes more sense the longer you use it.

Foldables have come a long way, but many of them still feel like regular phones that happen to open into a small tablet. Yes, there are similar designs from other manufacturers like Huawei and Samsung, and most recently, Apple as well. The Xiaomi 18 Fold takes a slightly different approach. When I opened it, the first thing I noticed was not how big the screen was, but how naturally it was shaped for the things I actually wanted to do on it. The square-curved design seems unsymmetrical at first – but boy, it grows on you fast!

It is wide, surprisingly thin, and, despite being a foldable with a huge battery inside, does not feel like I am carrying a small tablet around in my pocket. And my editor specifically told me to keep this under 600 words. Someone’s going to be mad.

The design is slim, wide, and surprisingly feels super-premium

The Xiaomi 18 Fold has a fairly distinctive design. The version I spent time with had a red finish, and I really liked the contrast between the matte glass back and the slightly darker metal frame.

It has that premium feel I expect from a flagship, but without trying too hard to look futuristic. When folded, it feels solid in the hand, and when I opened it, the 5mm-thick body immediately stood out. Xiaomi has managed to keep the unfolded phone remarkably slim, considering everything packed inside it.

At 219 grams, it is obviously not a lightweight phone. But I never got the feeling that the weight was getting in the way. That becomes even more impressive when you remember that Xiaomi has managed to put a 6,000mAh battery inside this thing.

The red version I handled also has an interesting contrast between the frame and the rear panel. The metal sections are slightly darker, while the matte glass back is a lighter shade of red. It gives the phone some personality without making it look overly flashy.

Despite being a foldable, the phone does not feel excessively chunky. Xiaomi has also given it IP58/IP59 protection against dust and water, including resistance to high-pressure water jets and immersion in up to 1 metre of water for 30 minutes.

The hinge is also something I paid attention to because that is usually where foldables start feeling fragile. The 18 Fold feels reassuringly solid when opening and closing it.

And then there is the crease.

I could feel a slight indentation down the middle of the folding screen when running my finger across it, but visually, it was surprisingly difficult to notice. During my time with the phone, the crease was barely noticeable most of the time.

The 7.58-inch screen is the real attraction.

The biggest reason to buy the Xiaomi 18 Fold is obviously the inner display, and this is where the phone gets particularly interesting. It has a 7.58-inch LTPO AMOLED panel with a 2364 x 1672-pixel resolution, a 120Hz refresh rate and a claimed peak brightness of 4,000 nits. It also supports HDR10+, Dolby Vision and HDR Vivid.

But the numbers do not tell the whole story. The display has a 2:1 aspect ratio, which means the phone opens into a wide landscape-oriented screen. I found this particularly useful when watching videos. Instead of getting the more portrait-oriented tablet experience seen on some book-style foldables, the Xiaomi 18 Fold naturally gives you a landscape canvas. However, a tip: watching movies would need the good ol pinch and zoom because most of them run on 16:9 aspect ratios. Not the Justice League Zack Snyder Edition, though.

The outer display follows the same philosophy. It is a 5.38-inch LTPO AMOLED panel with a 1168 x 1712 resolution, 120Hz refresh rate, and up to 4,000 nits peak brightness. It also gets Xiaomi Dragon Crystal Glass 3 and support for HDR10+, Dolby Vision, and HDR Vivid.

The cover screen is wide enough to use comfortably with one hand. The curved section on the right does eat into a little of the usable screen area, but I did not find it particularly problematic during basic use. Typing also feels more natural than I expected because of the wider shape. No thanks to my fat fingers, though.

XRing O3 keeps everything moving

Powering the Xiaomi 18 Fold is Xiaomi’s XRing O3 chipset, built on a 3nm process. The chip has a 10-core CPU clocked at up to 4.35GHz and is paired with an Arm G2-Ultra NX MC16 GPU.

My unit felt fast during everyday use. Apps opened quickly, animations were smooth, and switching between multiple applications did not feel like something the phone had to think about.

The specifications list four storage configurations: 256GB with 12GB RAM, 512GB with 12GB RAM, 512GB with 16GB RAM, and 1TB with 16GB RAM. Storage is UFS 4.1, although there is no microSD card slot.

The phone runs Android 17 with Xiaomi’s HyperOS 4 interface. What I particularly liked was how well the performance matched the screen.

A powerful chip on a foldable is useful, but it becomes much more interesting when you have this much screen real estate to actually take advantage of it. Multitasking feels like something I would genuinely use here rather than something I would try once because the phone allows it.

Xiaomi has not forgotten the cameras

Foldables often make compromises with their cameras, but Xiaomi has gone in the opposite direction with the 18 Fold. No, I am not looking at you, Samsung.

There is a triple-camera setup on the back consisting of a 200-megapixel primary camera with an f/1.7 aperture, a 50-megapixel telephoto camera with 3.5x optical zoom and a 50-megapixel ultrawide camera. The main and telephoto cameras also get optical image stabilisation.

The main camera uses a 1/1.56-inch sensor, while Xiaomi has also included laser autofocus and a colour spectrum sensor. The cameras use Leica lenses and the system supports HDR and panorama modes.

Video recording goes up to 8K at 24fps, while 4K recording is available at 30fps and 60fps with Dolby Vision. The phone can also record 1080p video at up to 960fps. There is also a 16-megapixel selfie camera on the inner display and another 16-megapixel camera on the cover screen. Both have an f/2.2 aperture and 21mm equivalent focal length.

That camera setup makes the 18 Fold feel more like a conventional flagship that happens to fold, rather than a foldable that happens to have cameras.

A 6,000mAh battery in a 5mm-thick foldable

The battery is another area where Xiaomi has gone big. The Xiaomi 18 Fold packs a 6,000mAh silicon-carbon battery. It supports 67W wired charging and 50W wireless charging, along with PD3.0 and 50W PPS support. Reverse wired charging is also supported. Again, for comparison, the Samsung S26 Ultra gets a 5000mAh battery. More so, the Fold 8 gets a 4800mAh battery.

Considering how thin the phone is when unfolded, fitting a 6,000mAh battery inside is impressive on paper. During my time with the device, the combination of the large battery and efficient 3nm chipset made the 18 Fold feel like a phone designed for heavy daily use rather than something that needs to be treated carefully to make it through the day. I usually find myself picking the 67W brick about one and a half days of usage.

It also gets stereo speakers with Dolby Atmos, while there is no 3.5mm headphone jack. The phone supports Wi-Fi 7, Bluetooth 6.0, and NFC, and Xiaomi has included NavIC alongside GPS, Galileo, GLONASS, BDS, and QZSS for positioning.

My first impression

After spending time with the Xiaomi 18 Fold, what stands out to me is that Xiaomi seems to have understood one of the biggest problems with current foldables: simply making the inner screen bigger does not automatically make it more useful.

The 18 Fold’s 2:1 inner display changes that experience. When I opened it, I immediately got a wide screen that felt natural for video playback, multitasking, and general tablet-style use. The 120Hz AMOLED panel, 4,000-nit peak brightness, and Dolby Vision support only add to that experience.

At the same time, it remains reasonably manageable when folded. The 219-gram weight is not particularly light for a conventional phone, but for a device with a 7.58-inch foldable screen and 6,000mAh battery, it does not feel unreasonable.

The cameras are also unusually serious for a foldable, with a 200MP main sensor, 50MP telephoto and 50MP ultrawide. The XRing O3 chip, up to 16GB RAM and UFS 4.1 storage complete what is essentially a flagship specification sheet.

There is, however, one big catch. A sad one.

The Xiaomi 18 Fold is currently a China-exclusive phone, which means buyers outside China may have to admire this one from a distance for now. But purely as a piece of hardware, my first impression is that Xiaomi built a passport foldable for the world but decided to make it available only in its home market, and that is a major regret.

The Xiaomi 18 Fold feels thin without feeling delicate, big without feeling unwieldy, and powerful without making a big show of it. Most importantly, the unusual wide format actually changes how I use the phone.

And after spending some time with it, I think that is exactly what a good foldable should do. It should not just give you a bigger screen. It should give you a reason to use that bigger screen.

Related coverage:

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024.

21-year-old Cameron John Wagenius (also known online as ‘kiberphant0m’ and ‘cyb3rph4nt0m’ ) was arrested in Texas in December 2024.

He pleaded guilty in February 2025 to hacking AT&T and Verizon after being charged on two counts of unlawfully transferring confidential phone records, and in July 2025 to multiple counts of aggravated identity theft, conspiracy to commit wire fraud, and extortion related to computer fraud.

According to court documents, while on active duty with the U.S. Army, Wagenius and his accomplices stole login credentials for the victim’s networks using the SSH Brute hacking tool he helped develop. They also used Telegram to transfer stolen credentials and plan their attacks.

“After data was stolen, Wagenius and his conspirators extorted the victim organizations both privately and in public forums. The extortion attempts included threats to post the stolen data on cybercrime forums such as BreachForums and XSS.is,” the Justice Department said.

“In other instances, conspirators offered to sell stolen data for thousands of dollars via posts on these forums. They successfully sold at least some of this stolen data and also used stolen data to perpetuate other frauds, including SIM-swapping. In total, Wagenius and his co-conspirators attempted to extort at least $1 million from victim data owners.”

In addition to the 70-month prison sentence, Wagenius was ordered to pay $294,978 in restitution for hacking into telecom companies’ databases, accessing sensitive customer records, and extorting the companies under threat of releasing stolen data unless they paid ransoms.

Two of his accomplices, Connor Riley Moucka (a.ka. “Waifu” and “Judische”) and John Erin Binns (aka “irdev” and “j_irdev1337”), were accused in November 2024 of breaching and stealing terabytes of data from more than 165 organizations using the services of Snowflake cloud storage company and demanding ransom payments to delete the stolen information and not leak it online.

Moucka was arrested on October 30, 2024, in Canada at the request of the United States and pleaded guilty to his role in the Snowflake hacking campaign in August 2026.

Data breaches linked to Snowflake attacks affected hundreds of millions of people, customers of AT&T, Ticketmaster, Santander, Los Angeles Unified, QuoteWizard/LendingTree, Pure Storage, Advance Auto Parts, and Neiman Marcus.

After these incidents led to massive data breaches, Snowflake announced it would enforce multi-factor authentication (MFA) and require customers to choose passwords at least 14 characters long.

Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.

Save your seat

VistaPrint specializes in custom physical and digital marketing products for small businesses, such as brochures and promotional products, along with personal products like invitations, T-shirts, business cards, and posters to meet your print and online personalization needs. Fortunately, you don’t have to pay an arm and a leg to shop for these trending products, thanks to our selection of deals for both new and returning customers.

The Best Online Photo Printing Services

Print memories you can hang on the wall, stash in your wallet, or just hold in your hand.

Use Top VistaPrint Promo Codes for up to 20% Off

We have a VistaPrint coupon to help you save big on personalized gifts for yourself or your loved ones. Right now, new customers get 20% off their first order of $100 or more with the VistaPrint promo code WIRED20 at checkout. Once you’ve personalized whatever you want—from greeting cards to full-size canvas prints and pillows—enter the code at checkout to save big on your purchase.

Get 25% Off with Vistaprint Promo Code for Drinkware

Custom drinkware makes a thoughtful gift for parents, alumni, or weddings. It’s also a great way to personalize your drinkware by showcasing your favorite sports team or child. Currently, you can enjoy a 25% discount on drinkware with the Vistaprint promo code SAVEVP, valid through November 8. Shop early this year and take advantage of this exclusive discount—cheers!

15% Off All VistaPrint Orders

One of the easiest ways to save at VistaPrint is to sign up for their email newsletter. Once you sign up, you’ll receive a VistaPrint promo code for 15% off your first purchase. Along with the VistaPrint discount code, you’ll also receive special offers, news about product launches and services, and new design alerts.

Use Vistaprint Business and Get 20% Off

Launching a new small business is one of the toughest, most daunting tasks a person can take on. Running a new business requires meticulous attention to detail, from big-picture items to the smallest tasks. Vistaprint wants to soften the blow a bit by offering 20% off your first order of necessary tools and products with the Vistaprint promo code NEW20. Vistaprint offers valuable tools like a business name generator to spark ideas, AI-generated help with logos, and support for visibility on Yelp. Be sure to check out Vistaprint’s tools to help launch your business, and use this Vistaprint promo code for an extra 20% off—when you’re launching a new business, every cent saved counts.

Discover More Verified VistaPrint Coupons and Discounts

There are other VistaPrint promos, such as $10 off purchases of $100 or more, $20 off $150 or more, and $50 off $250 or more. In addition to using one of our handpicked VistaPrint voucher codes, you can get 15% off your next order when you sign up for texts. VistaPrint also offers premium memberships that renew annually and are ideal for small businesses and frequent users. Members get up to 40% off products, 30% off Deposit photo subscriptions, unbranded products and packaging, and global discounts. Best of all, you can try these services free for 30 days. Be sure to check out our VistaPrint promo codes and discounts page to see the rotating discounts available.

Discover the Latest Vistaprint Postcards With Up to 30% Off

Forget the old holiday or business card and upgrade to contemporary times with Vistaprint postcards. They offer a wide range of styles to fit your business, ideas, and budget. They have a huge range of styles and sizes, from coupons to mailers, in various price points, with classic designs to contemporary styles.

Redeem Your VistaPrint Promo Code in a Few Easy Steps

Whether you’re looking for the best deal on custom VistaPrint business cards for your small business or ordering custom t-shirts for your family reunion, it’s simple to apply a coupon to your next VistaPrint order. All you have to do is copy the code and paste it in the designated field at checkout. Be sure to also look out for other trending VistaPrint deals that don’t require a code to redeem your savings on your purchase. For limited-time promotions, just add the promo item to your cart to instantly save.

Find Everything You Need With VistaPrint Custom Items

VistaPrint has been with me through the years—for thank-you cards, holiday gifts, mugs with my friends’ faces, calendars to make myself a centerfold, family photo books, wedding invitations, and subsequent divorce-party invites. What can I say? I live a charmed life—and VistaPrint has been there through it all. It has been my go-to for personalized products for the past decade, offering good prices on all my oddball creations. So stock up and discover discounts on a selection of marketing must-haves like vinyl banners, business cards, posters, custom mugs, and more. Go ahead, check it out. You know you’ve always wanted to eat off a plate or sleep on a pillow with your loved one’s face on it.

Customize Your Vistaprint Wedding Invitations This Month

Vistaprint makes it easier (and cheaper) than ever to get big printing jobs done, with the ability to personalize as much as you want. You can save big on Vistaprint wedding invitations, with 100 starting at just $90 (half off!); Letterpress Wedding Invitations, with 80 starting at $260 (25% off); and Wedding Party Invitations, with 100 starting at just $90 (50% off). Be sure to check out their expansive, customizable line of wedding invitations to see if they’re the right fit for you.

50% Off Invitations & Announcements at Vistaprint

Wedding expenses add up quickly, so Vistaprint is offering up to half off invitations and announcements, and up to 25% off celebration day-of products with the Vistaprint promo code GET50 (through December 31). This means massive savings on stationery, invites, announcements, and party supplies—huge savings on the small things that add up.

A new India-based AI Research Lab is looking at how AI can support workers as the technology continues to change jobs and labor markets. The Institute for Human Flourishing (IHF), founded by Ravi Venkatesan and led by CEO Urvashi Aneja, launched in New York on September 23 during the high-level week of the United Nations General Assembly. It will begin by studying how AI can raise incomes, expand workers’ control, and create new opportunities in India, then take its findings to other parts of the Global South. The Rockefeller Foundation, Schmidt Philanthropies, and the Government of India back the initiative.

Why IHF Is Starting With India

IHF will begin its work in India because its large, diverse workforce will allow it to study AI’s influence. Around 90 percent of the Indian workforce is informal, including farmers, craftspeople, and micro enterprises. This means AI could help those workers improve efficiency and create new opportunities by learning how to apply it effectively. However, changes in the labor market also threaten entry-level IT and BPO positions. These roles have traditionally helped workers move into the middle class in India and other countries.

Automation is also pressuring growth models that rely on relatively cheap labor. IHF believes the bigger challenge is how AI reaches workers and small businesses. Changes in how people organize work and share information will also affect its impact. Institutions will play a role in deciding who benefits from these changes. Venkatesan believes India can demonstrate how AI can support wider economic opportunities. IHF plans to connect evidence, real-world work and policy to explore this approach.

IHF’s Labs and Programs Will Study AI’s Impact on Workers

IHF plans to create three initiatives to study how AI affects workers and jobs. The Livelihoods Lab will test human-AI collaboration with workers and organizations in real-world settings. Participants will help design these projects, while IHF will publish every finding as an open public good. The AI and Jobs Observatory will track workers’ experiences as AI changes different types of jobs.

It will also develop an Index of Human Flourishing that looks beyond income. The index will measure factors such as agency, dignity, capability, and economic security. The Policy and Narrative program will turn these findings into evidence-based policy advocacy. It will also connect a Global South advisory network around shared priorities. Together, these programs will help IHF find practical ways for workers and smaller businesses to benefit from AI.

• Rainbow Six Tactics game director Martial Potron says Mario + Rabbids helped the team understand “the metrics of tactics”
• He says it borrowed the “DNA” of the series, and it was a different experience from working on Ghost Recon
• Potron adds that he had to change his developer habits when working on
• Rainbow Six Tactics

Rainbow Six Tactics game director Martial Potron has said the development team borrowed the “DNA” of the studio’s turn-based game series, Mario + Rabbids, for tactical level design inspiration.

“Mario + Rabbids helped us shape some parts,” Potron told TechRadar Gaming in a recent interview about the upcoming Siege spin-off. “The team, especially the level design team that came from Mario + Rabbids, really helped us to understand the metrics of tactics.”

Nintendo 64 owners spent 1996 lining up hang gliders over Little States and hoping the analog stick would forgive a late flare. Nearly thirty years later, Pilotwings 64 Recompiled puts that same flight school on Windows and Linux as a native program you launch like any other PC game.

Static recompilation is the method that enables this project. Two crucial tools, N64Recomp and N64ModernRuntime, handle the heavy lifting, transforming the original machine code from the N64 into a PC executable that runs on your computer, with RT64 handling the graphics. This is all built on Garrett Smith’s remarkable decompilation work, which finally reached a full code match in April 2026, providing all subsequent builders with a very handy guide to what each and every part of the game code is doing. You can see how all the vehicles, menus, save screens, and so on fit together, and then, in mid-September 2026, an independent developer took that work and turned it into a playable game on Windows and Linux, with the first release being 0.1.0, followed by the 0.1.1 hotfix, and Claude has been assisting with patches, tools, documentation, and even the art.

When you launch the game, the first thing you notice is the widescreen mode. The view fills your current monitor, and all of the interface elements are neatly arranged at the screen’s edges. The old black border that used to cut off the image has been removed, and matrix interpolation now kicks in, providing silky smooth animation that matches your display’s refresh rate, even with all of the camera cuts and fast motions. You no longer have to go through those long, long menu stalls that used to take up to 6 seconds, because they now simply snap from one screen to another.

The launcher includes all of the settings you need to customize the graphics, sound, and even mods. You can use either a keyboard or a controller, so don’t worry about the fact that the original N64 pad doesn’t work well on modern desks. Every vehicle and bonus level are included, as are the game results panels and save system. There is some footage that showcases some of the important improvements, such as rocket belt hovers that now respond to minute throttle adjustments, gyrocopter runs that are readable even at high refresh rates, and ring courses that are no longer cut off by the old 4:3 window.

The cartridge data itself is not included since you must first locate a USA dump of Pilotwings 64 with a specific SHA-1 code and refer the launcher to it. The project is MIT licensed, and the runtime is GPL-3.0, so everything works out well. On the other side, running the Linux version requires a Vulkan driver, and macOS is not supported. There are a few things that don’t work as well as they could, such as the quick camera motions, which can get slightly out of sync at low frame rates because the camera is right inside every object’s math. Changing the aspect ratio when viewing the photo album simply blanks out the pages until you close and reopen it, though the 0.1.1 hotfix resolved a problem in which the photos were drawing twice as large as their spaces. Then there’s the interpolation on a true 120 Hz display, which still need some time to perfect, and the Linux packages were, ironically, produced on WSL2.

For anyone who spent their childhood playing on that old cartridge, the draw is immediate. Hang glider approaches, rocket belt landings, and gyrocopter passes look fantastic on a modern widescreen, yet the old game continues to function properly. The builds can be found on GitHub under danielgomesvieira2000/pilotwings-64-recomp. Simply download your own USA dump, select a controller setup that feels right, and take another trip around Little States.
[Source]

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities.

Citrix released security updates to address the flaws (tracked as CVE-2026-88771 and CVE-2026-88772) days after national cybersecurity agencies, IT suppliers, and security teams began privately contacting Citrix customers and advising them to shut down their NetScaler appliances.

For instance, the Dutch National Cyber Security Center (NCSC-NL) reportedly warned organizations in the Netherlands about two critical NetScaler zero-days without CVE IDs that allowed threat actors to place shellcode directly into memory.

On Sunday, Citrix confirmed active exploitation of the two vulnerabilities in zero-day attacks and urged customers to patch their systems immediately.

Both flaws allow unauthenticated attackers to gain remote code execution on vulnerable NetScaler appliances. The first affects all NetScaler ADC and NetScaler Gateway deployments with default configurations, while the second requires DTLS to be enabled (Citrix noted that DTLS is toggled on by default on VPN virtual servers).

“Exploitation of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler deployments has been observed. Citrix strongly urges affected customers to install the relevant updated versions as soon as possible,” the company warned in a Sunday blog post that has a ‘noindex’ meta tag which tells search engines not to index the page.

“These vulnerabilities vary by deployment configuration and enabled features, and include issues that could allow remote code execution, denial of service, HTTP request smuggling, policy bypass, and TCP initial sequence number prediction under specific conditions.”

Citrix has also shared what it describes as “generic Indicators of Compromise” through NetScaler Console to help security teams identify NetScaler deployments that may have already been compromised. However, it also warned that these IoCs “might be of limited forensic value and might fail to identify actual compromises” and advised customers “to retain the services of experienced forensic investigators.”

Currently, threat watchdog Shadowserver tracks over 23,000 IP addresses with NetScaler fingerprints exposed on the Internet (including nearly 22,000 NetScaler ADC appliances and just over 1,500 Gateway instances). However, there is no information on how many are honeypots, have already been patched, or have vulnerable configurations.

​​​On Sunday, CISA also added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog and ordered Federal Civilian Executive Branch (FCEB) agencies to secure all vulnerable Citrix appliances by September 30, as mandated by Binding Operational Directive (BOD) 26-04.

“Given the potential consequences of successful exploitation and the fact that malicious actors are exploiting at least some of these vulnerabilities, CISA urges users and administrators to review Citrix’s advisories,” the cybersecurity agency warned.

“If possible, users are encouraged to check for indication of compromise prior to patching. Citrix has made indicators of compromise available through NetScaler Console and published additional guidance. Should your organization suspect compromise, it is important to preserve forensic evidence prior to applying updates, as updates may result in loss of forensic visibility.”

These two flaws are just the latest of several other Citrix vulnerabilities that attackers have exploited in the wild since the start of the year.

In March, Citrix urged admins to patch two other NetScaler flaws (CVE-2026-3055 and CVE-2026-4368) days before threat actors began abusing them in attacks. More recently, in early September, attackers began exploiting a NetScaler authentication bypass (CVE-2026-19490) patched in mid-August.

Since November 2021, CISA has flagged 26 actively exploited Citrix vulnerabilities, including six abused by ransomware gangs.

Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.

Save your seat

Removing the Qidi Q2 from the box, I was instantly pleased to see that this new machine reflected everything that I have liked about the Qidi Plus4 machine that I looked at a couple of years ago. However, this is a smaller version with a footprint that is better suited to smaller workshops and studios.

Once again, it’s easy to write off these machines. Qidi , while in the business for as long as many of the big-name brands, just isn’t as well-known, and their machines just don’t have that spark of innovation that we see from the likes of Prusa Research, Bambu Lab, Creality, Elegoo or AnyCubic; however, above all, bar possibly Prusa, Qidi have reliability.