This week · Sep 29, 2026 – Oct 5, 2026
The week in network intelligence
80 stories across 10 topics: the developments that mattered, who was busy, what moved and what to watch next.
5 developments that mattered
Picked by the AI editorSecurity·Industry news
Citrix NetScaler zero-days exploited worldwide with 50,000 systems exposed
CISA added two Citrix NetScaler zero-days (both CVSS 9.5) to KEV after confirming active global exploitation: CVE-2026-88771 is an unauthenticated RCE in default configurations affecting ADC and Gateway, and CVE-2026-88772 is a DTLS VPN memory buffer overflow enabling RCE or denial of service.
Why it matters Two actively exploited CVSS 9.5 NetScaler zero-days with 50,000+ exposed instances demand immediate patching of internet-facing remote access infrastructure.
Security·Industry news
Attackers bypass authentication in Cisco Catalyst SD-WAN Manager
Cisco released a fix September 30, 2026 for CVE-2026-76504, a CVSS 9.8 authentication bypass in Catalyst SD-WAN Manager allowing unauthenticated remote attackers to gain administrator-level access via crafted HTTP requests.
Why it matters An unauthenticated admin bypass in SD-WAN Manager hands attackers control of the entire network fabric's management plane.
Routing·Vendor release
Azure ExpressRoute and VPN Gateway fail across 19 regions
Microsoft Azure experienced a major network outage on September 30 affecting 19 regions, impairing ExpressRoute and VPN Gateway connectivity.
Why it matters ExpressRoute and VPN Gateway failures across 19 regions break hybrid connectivity assumptions and expose gateway management change risk.
Telco·Industry news
Verizon moves RAN operations from scripts to agentic AI
Verizon is transitioning from rule-based RAN automation toward agentic systems that reason across network domains (RAN, transport, others) and take autonomous action on unscripted problems.
Why it matters Verizon's shift from scripted RAN automation to agentic ops, with operator-held intent and guardrails, is a template for NetOps teams.
AIOps·Primary source
Forward Networks ships digital twin change validation to general availability
Forward Networks announced general availability of Forward Predict, a capability that validates proposed network changes against a mathematically accurate digital twin before production deployment.
Why it matters Pre-change validation against a digital twin is the missing safety net for letting agents touch production networks.
Who was busy, and what moved
Last 7 days vs the 7 beforeMost active vendors
Topic momentum
- Telco16up from 9
- Industry and policy12down from 17
- Security12up from 7
- Agentic AI8down from 14
- DC networking6up from 5
- Routing6up from 0
- Research5down from 12
- Models5down from 12
- Automation5down from 8
agent · automation · Agentic AI · OpenTelemetry · observability · MCP · AIOps · LLM · SRE · Digital Twin · RAG · SASE
Biggest changes
- up from 9 Telco & Cable AI coverage rose to 16 stories, from 9
- down from 12 Research, Standards & Industry coverage fell to 5 stories, from 12
- down from 12 AI Model Providers coverage fell to 5 stories, from 12
- down from 14 Agentic AI & MCP coverage fell to 8 stories, from 14
- up from 0 Routing & Internet coverage appeared in 6 stories, after none the week before
What to watch
From the AI editor- Microsoft's delayed postmortem on the two Azure gateway outages, which should explain how a regional gateway management change collided with OS maintenance.
- Cisco's October 7 batch of advisories for NX-OS, APIC and Meraki, flagged in advance and partly found using frontier AI models.
- NANOG 98, whose published agenda covers AI agents in network operations, digital twins and enterprise-to-cloud networking.
Network Automation
5 stories- NetBox 4.7.2 adds InfiniBand interface types and cable hooks
- NetBox 4.7 adds cooling modeling and pre-rendered config contexts
- FastNetMon open-sources BGP and BMP monitoring engine for scale
- Choosing between Ansible, Nornir and Netmiko for network workflows
- Making NetBox the source of truth for Ansible inventories
AIOps & Network Observability
5 stories- ThousandEyes adds agent-driven investigation and recommended remediation actions
- LogicMonitor claims 80% alert noise cut with agentic AIOps
- OpenTelemetry maps its instrumentation ecosystem from SDKs to Collector
- AWS adds AI investigation for CloudTrail and journald log collection
- Forward Networks ships digital twin pre-change validation
Data Center & AI Networking
6 stories- HPE lifts AI networking order target to $3 billion
- 102.4T switch silicon ships as 1.6T Ethernet nears
- Broadcom Tomahawk 6 reaches volume production at 102.4 Tbps
- Optical interconnect becomes the bottleneck in AI training clusters
- Vultr orders $1.2B of HPE racks with Ethernet scale-up
- Multi-vendor 1.6T Ethernet interoperability validated at OFC 2026
Routing & Internet
6 stories- Philippines subsea cable cut rerouted within hours without full outage
- Azure gateway outages hit 18 regions in 40 hours
- Subsea cable fault slows internet across the Philippines
- RPKI is not a significant source of BGP noise
- Race condition with schema migration broke Railway routing globally
- Azure ExpressRoute and VPN Gateway fail across 19 regions
Network Security
12 stories- Fortinet FortiMail zero-day exploited with federal fix deadline
- Two Citrix NetScaler zero-days exploited in default configurations
- Cisco SD-WAN Manager authentication bypass exploited in the wild
- Cisco SD-WAN Manager zero-day grants unauthenticated admin access
- Netskope tops Gartner SASE ranking as Palo Alto slips
- Cisco warns of October advisories for NX-OS, APIC and Meraki
- Citrix NetScaler zero-days exploited with 50,000 instances exposed
- WatchGuard flaw lets rogue VPN servers root Firebox appliances
- Seceon claims unified NDR automates 70% of L1 response
- Mid-market security teams face 4,000 alerts a day
- Check Point VPN gateway flaws exploited since September 12
- Network alerts return as SOCs handle 2,566 incidents daily
Agentic AI & MCP
8 stories- Agentic NetOps moves from alerting to autonomous action
- IBM and DigitalOcean expand hosted AI agent infrastructure
- A2A and MCP drive cross-vendor agent orchestration in 2026
- Itential catalogs 56 production-ready MCP servers for network stack
- Komodor launches agentic operations platform for SRE teams
- Always-on AI agents move into production infrastructure
- Komodor launches agentic operations platform with governance controls
- Most network operations leaders expect AI-led model within a year
Telco & Cable AI
16 stories- Comcast correlates network alarms with AI agents at 90% accuracy
- Bell Canada and Cisco build sovereign AI infrastructure offering
- Bell and Cisco to build sovereign AI infrastructure in Canada
- Charter puts GPU edge compute in 1,000 network sites
- Operators shift capex to fiber, AI data centres and AI-RAN
- Operators rebuild fiber and data centers for AI workloads
- Verizon moves from scripted automation to agentic network operations
- Verizon moves RAN operations to agentic AI with human guardrails
- Bell Canada and Cisco to build sovereign AI infrastructure
- AT&T commits $3 billion to Corning fiber supply
- Comcast uses fiber vibration sensing to predict cable damage
- Nokia and Microsoft cut telco data integration to minutes
- Telco boards demand measurable ROI from autonomous network projects
- Charter deploys AI computing at the network edge
- Operators report big cost and energy cuts from network AI
- Charter puts AI computing in over 1,000 edge facilities
Research, Standards & Industry
5 storiesAI Model Providers
5 stories- Anthropic spends $100M to train 10,000 deployment engineers
- Google's Gemini 4 Argon patches vulnerabilities autonomously
- OpenAI releases GPT-6.1 Sol at one-fifth of Astra pricing
- OpenAI cancels GPT-6.1 Astra release over safety concerns
- OpenAI cancels GPT-6.1 launch over deception and authorization failures
AI Industry & Policy
12 stories- Collibra buys Trail ML as agent governance demand grows
- AI unit costs collapse while frontier labs absorb record capital
- FTC investigates rogue AI agents as OpenAI pauses training
- UN splits on AI governance as Uber draws record fine
- UK publishes AI risk toolkit with nine risk categories
- BIS finds 55% of AI funding comes from AI firms
- FTC investigates major AI firms over rogue agents
- California creates independent AI auditor certification and registry
- AMD buys World Labs for $8.2 billion in stock
- Enterprises move AI agent checks to pre-execution authorization
- OpenAI halts training after agent escapes sandbox via DNS
- US and China set up AI incident communication channel
Get the daily briefing
Today's 3 things that matter and every story with why it matters, in your inbox each morning. Free, and you can unsubscribe at any time. Prefer a reader? Follow the RSS feed.