Gateway

The US Cybersecurity and Infrastructure Security Agency says attackers are actively exploiting two critical vulnerabilities in Citrix NetScaler devices worldwide. The flaws affect NetScaler ADC and Gateway products, which are widely used by organisations to manage and secure application traffic. Security teams are being urged to patch immediately, as exploited NetScaler vulnerabilities have historically enabled large-scale breaches of governments and businesses.

Hong Kong's exchange has listed eight new exchange-traded funds, aiming to capture growing demand from mainland Chinese investors for exposure to overseas assets. The move reflects efforts to position the city as a gateway for Chinese capital seeking international diversification, as tightening onshore investment options push investors toward offshore products for foreign market access.

Cloudflare has announced an OHTTP (Oblivious HTTP) gateway, a service that lets websites receive requests without learning the client's IP address or other identifying metadata. The technology separates the request's content from its origin using relay servers, improving user privacy. Developers on Hacker News are discussing the technical trade-offs, potential for abuse, and how it compares to similar privacy-preserving designs like Apple's Private Relay.

Cloudflare has announced the launch of its OHTTP Gateway, a service built around Oblivious HTTP, a protocol designed to let clients send requests through a relay so that neither the relay nor the target server can link a request to its sender. The move strengthens Cloudflare's privacy-focused infrastructure offerings and follows growing industry adoption of oblivious proxying standards. Early technical discussion online is just beginning, with limited commentary so far.

Adobe forecasts US online holiday sales of $275.1 billion, with traffic referred by AI tools expected to jump 130% as shoppers increasingly use chatbots and assistants to find deals. The projection signals that generative AI is becoming a meaningful gateway to e-commerce during the busiest retail period, and retailers are watching how AI-driven recommendations reshape holiday buying.

Oracle has announced NAT support on its Dynamic Routing Gateway (DRG), a networking feature that lets enterprises connect on-premises networks to Oracle Cloud Infrastructure even when both sides use overlapping IP address ranges. By translating addresses in transit, the gateway removes the need to renumber networks before establishing private connectivity, a long-standing pain point for migrations, mergers and multi-cloud setups.

Lt. Col. Michael Frick has discussed Mission-K 2026 and the Space Innovation Gateway, describing it as Germany's 'space front door' for access to space-related innovation and cooperation. The initiative positions Germany as an entry point for international partners, startups and military-civil space collaboration heading into 2026. Details on funding and concrete projects remain limited, but the framing highlights Germany's growing ambition in space policy.

GitLab has fixed a critical security flaw tracked as CVE-2026-90970 affecting its AI Gateway component. Security researchers urge organizations running the platform to apply the patch promptly, as critical flaws in AI infrastructure can expose sensitive data and models to attack. No details on active exploitation were provided, but administrators are advised to update their installations as soon as possible.

A new vulnerability tracked as CVE-2026-88779 has been disclosed affecting Citrix NetScaler ADC and NetScaler Gateway, with a high severity rating of 8.7 on the CVSS scale. The finding is circulating among cybersecurity professionals, who are monitoring the flaw for details on exploitation and the availability of patches from Citrix.

A report by Salaam Gateway examines how Islamic social finance tools, such as zakat, charity and waqf, are being used to support Sudan's population during its ongoing crisis. With the country's formal economy and state services devastated by war, Islamic financing mechanisms are helping deliver food, aid and basic support to communities. The piece highlights these faith-based systems as a lifeline where conventional institutions have failed.

A round of self-hosted software updates was released on 4 October. Wekan v12.18 brings updated image processing and development dependencies, fluxer-gateway improves data processing efficiency, and MCSManager v10.19.0 adds automatic updates alongside bug fixes. Open-source enthusiasts tracking self-hosting projects are noting the releases as routine but useful maintenance across several popular tools.

Cloudflare has announced its OHTTP Gateway, a new service aimed at letting developers route traffic through Oblivious HTTP, a protocol designed to hide a client's IP address and other metadata from the destination server. The announcement is drawing attention among developers interested in privacy infrastructure and open-source web tooling, with discussion focused on how the gateway could make metadata-protecting connections easier to deploy without running dedicated relay infrastructure.

A vulnerability tracked as CVE-2026-88771 has been reported affecting Citrix NetScaler ADC and Citrix NetScaler Gateway, the widely used application delivery and remote access products. Security researchers are flagging the flaw, and organisations running NetScaler appliances are likely to face questions about exposure and patching. Details on severity and exploitation have not been confirmed, so administrators should follow official Citrix advisories.

Brussels Airport (BRU), Belgium's main international airport, is being discussed as a key travel hub. The airport serves as the country's primary gateway for passengers and cargo, connecting Brussels to destinations across Europe and beyond. No specific incident or announcement has been confirmed, but interest in the airport's operations and role in European air travel is circulating.

Citrix has released a long-awaited security bulletin for its NetScaler ADC and NetScaler Gateway products, covering eight vulnerabilities tracked as CVE-2026-88771 through CVE-2026-88778. Administrators of the widely used application delivery and remote access products are being urged to review the advisory and apply the relevant patches, as NetScaler flaws have historically been heavily exploited.

Tuskira has released an open source AI agent runtime gateway designed to let teams observe, govern and switch between large language models and MCP tools without rewiring their agents. The announcement, distributed via Business Wire, targets enterprises building AI agents that need model flexibility, oversight and control. Details on adoption and community response are limited so far, as the launch is newly announced.

GitLab has released emergency security patches addressing two critical vulnerabilities: a remote code execution flaw in its AI Gateway, tracked as CVE-2026-90970, and a maximum-severity path traversal issue. Both flaws are reportedly being actively exploited, prompting the unusually urgent rollout. Security teams are being urged to apply the updates immediately, with the disclosures fueling renewed discussion about securing AI infrastructure.

GitLab has patched a critical vulnerability, CVE-2026-90970, rated CVSS 9.9, in its AI Gateway. The flaw allows an authenticated attacker to escape the prompt-template sandbox and execute arbitrary commands on self-hosted deployments. Security professionals are urging administrators to apply the update quickly and check whether their installations are affected.

GitLab has released fixes for CVE-2026-90970, a critical vulnerability (CVSS 9.9) in its AI Gateway. An authenticated user with access to the Duo Agent Platform can run commands on the gateway. Only self-hosted gateway deployments are affected. Patches are available in versions 19.2.4, 19.3.2 and 19.4.1, and administrators are urged to update immediately.

A networking enthusiast has highlighted that RFC 1267, the document defining Border Gateway Protocol version 3, was published in October 1991. BGP remains the routing protocol that ties the internet together, so reminders of its early specifications draw interest from engineers interested in networking history, open-source networking, and how the internet's core infrastructure evolved over more than three decades.

RFC 8654, the standard defining extended message support for the Border Gateway Protocol (BGP), was published in October 2019. BGP is the routing protocol that holds the global internet together, and the update allows larger BGP messages than the original specification permitted. A networking guide covering IP routing and BGP internals is being shared and discussed among open source and Linux networking enthusiasts.

C1.ai has launched the C1 LLM Gateway, a platform designed to help enterprises govern how requests are routed across different large language models. The product is aimed at giving companies centralized control over AI model usage, costs and policies. The announcement was carried by major newswires and financial outlets, drawing attention within enterprise technology circles.

Georgia Ports Authority's chief executive says a berth at the Ocean Terminal in Savannah is now ready to handle some of the largest container ships calling in the Americas. The announcement points to expanded capacity for big vessels at the busy US East Coast port, which has been investing heavily in terminal upgrades to stay competitive with other Atlantic gateways.

A security vulnerability tracked as CVE-2026-90970 has been disclosed in GitLab's AI Gateway, reportedly allowing remote code execution on affected systems. GitLab's AI Gateway sits in front of the company's AI-powered features, so a flaw there could expose organizations using the platform's AI tooling. Administrators are being urged to check their deployments and apply patches. Details on affected versions and exploitation are still limited.