cd /news/artificial-intelligence/runtime-the-polycurious-ciso-enter-g… · home › topics › artificial-intelligence › article
[ARTICLE · art-143222] src=thestack.technology ↗ pub= topic=artificial-intelligence verified=true sentiment=· neutral

Runtime: The Polycurious CISO; enter Gemini 4; JPMorgan punches holes in NetScaler

Google's Gemini 4, codenamed "Argon," has been released and is already being used to rewrite core libraries including re2 and libgav1 — up to 800,000-plus lines for the Fuchsia Zircon kernel — in Rust, according to Runtime. The model is not yet generally available, and Runtime notes the pricing it will carry. The same edition reports escalating NetScaler attacks, with Censys seeing roughly 40,000 exposed instances of a pre-auth RCE vulnerability that JPMorgan reported and Mandiant says is dropping previously unseen malware.

by read4 min views3 publishedOct 1, 2026
Runtime: The Polycurious CISO; enter Gemini 4; JPMorgan punches holes in NetScaler
Image: Thestack (auto-discovered)

Welcome to Runtime! Ed Targett here, stepping in for Tom Krazit*. Today: Gemini 4: The covers are off; HSBC's CTO wants to "hollow out" his mainframes; Alex Stamos chides OpenAI's Dean Ball for "guy in the discourse" comments as Frontier Labs vs Infosec*™ continues, and more.

Like what you read? Do forward this email to a friend or colleague! You can sign up here to get Runtime for free every week, or become a premium member for exclusive interviews and a 50% discount on events.

First up: Nestlé's CIO, HSBC's CTO say...

Over the past two weeks I've sat down for in-depth conversations with HSBC's Group CTO Mario Shamtani, and Nestlé's CIO Chris Wright; two self-effacing Brits overseeing two big, if very different IT shops.

HSBC has ~60,000 engineers running, among other things, 7,000 Kubernetes clusters, 2.4 million containers, nearly 65,000 namespaces, and oversees over $3 trillion in assets. Nestlé's the world's largest food and beverage company and its IT operation – via supply chain and other software systems – touches farms, factories, shipping and more.

Both conversations were illuminating and spanned the manifold traditional technology leadership challenges in large enterprise environments. Agents? (And pressure to automate further?) Sure. But also...

Mainframe modernisation; SAP migrations; persistent data challenges that are “people and process” issues as much as technology. Both exclusive interviews are coming soon for premium subscribers to The Stack.

Please do subscribe ($300/y, or $30/m.) Your support is meaningful for us as a bootstrapped, journalist-owned publication. We reinvest every penny/cent back into independent editorial.

Across The Stack

Micron mops up: $8 billion, to $80+ billion in net income in one year.

KV caching's big business these days...

The comedy of the commons: "Hi. I'm Breandán. I'm the Deputy CISO of the British government, which means I work at the center of one of the biggest federated messes in the country." That’s a punchy intro by a normally circumspect civil servant who suggests his peers should learn from a Nobel winner and treat their orgs as a commons, not a hierarchy.

Once more unto the breach, dear friends: NetScaler attacks continue to escalate. (When a pre-auth RCE vulnerability affecting almost every configuration hits, that’s bad. Censys sees some 40,000 exposed instances.) Mandiant said previously unseen malware is being dropped.

JPMorgan reported the vulnerabilities and is understood to be… unhappy.

Perimeter appliances/load balancers/VPN gateways, networking software; it’s all getting relentlessly targeted. Cisco now has 17’s bugs in CISA’s “known exploited” catalogue; that’s already double last year’s number.

What’s a Blue Team to do? Well…

Rusty agents: Gemini 4 “Argon” is here and already rewriting it (“core libraries like re2, libgav1 up to 800K+ lines for the Fuchsia Zircon kernel”) in Rust at Google.  You can’t get it yet, but this is what it will cost you.

A gimlet eye: Noah Bovenizer turns to Gimlet Labs for our “One to Watch” feature. (what is an “agent-native inference cloud” anyway?)  Read on.

All that and more on The Stack this week.

X marks the spat

Stacked up: The week ahead

Redis forkers unite! Valkey Conf. kicks off in Prague on Oct. 5.

**Your favourite ex?** [__WebexOne rekindles relationships__](https://www.webexone.com/?ref=thestack.technology) in Austin, Oct. 5-8

**Landlubbers:** Sailpoint Navigate [__takes to Austin, Texas__](https://www.sailpoint.com/navigate/austin?ref=thestack.technology) on Oct. 5-8.

**What are you smoking?** World AI Summit hits [__Amsterdam__](https://worldsummit.ai/?ref=thestack.technology), Oct. 7-8

We're also reading:

"Insecure reporters": Google, Harvard, MIT researchers say "LLMs tend to present narratives of success by default" but a simple nudge can...

w-OT? Federal orgs. are not OTT on their OT security. (Can the burgeoning, big CEO-backing Alliance for Critical Infrastructure help?)

"Intimidate everybody"? Citi on What the bond market is telling us...

Get your story in the spotlight. Reach 30,000 absurdly brilliant and influential subscribers. Partner up with The Stack. We run events, do multimedia storytelling, offer newsletter sponsorships and more.

Get a deck. Have a chat.

── more in #artificial-intelligence 4 stories · sorted by recency
── more on @google 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/runtime-the-polycuri…] indexed:0 read:4min 2026-10-01 · —