That they have not issued any!!! new updates since the pretty useless blog is pretty insane. Many have turned off their netscaler instance and people cant work and Citrix has not provided ANY More information. Given the rise of more AI based detection, Netscaler is going to get pulled apart by the security community in the next months to find more vuls.

I a 100% agree, to go from "we'll have a blog in two hours" to the "ya there's issues contact us" and now we have.. nothing, since.

I had greater expectations on the Global Deny List in events like this… one thing that bothers me is that they have IP rep, Bot management (sigs), Appfw sigs and now global deny list. There must be some overlapping already

No, I think it's fair, we have to expect some kind of protection against these types of issues and it can't (shouldn't) always be down to patching one piece of the software, if we can do it with a policy or similar.. in the future.

Every single one of the mentioned features haa a different way to apply and update

Yeah, and seemingly, very little integration / cohesion.

Image from iOS.jpg,Screenshot 2026-10-03 at 21.14.47.png

Fortunately, their stuff is cheap!

Ask them why ASLR is disabled 🤣