{"slug": "runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler", "title": "Runtime: The Polycurious CISO; enter Gemini 4; JPMorgan punches holes in NetScaler", "summary": "Google's Gemini 4, codenamed \"Argon,\" has been released and is already being used to rewrite core libraries including re2 and libgav1 — up to 800,000-plus lines for the Fuchsia Zircon kernel — in Rust, according to Runtime. The model is not yet generally available, and Runtime notes the pricing it will carry. The same edition reports escalating NetScaler attacks, with Censys seeing roughly 40,000 exposed instances of a pre-auth RCE vulnerability that JPMorgan reported and Mandiant says is dropping previously unseen malware.", "body_md": "*Welcome to Runtime!* *Ed Targett* *here, stepping in for* *Tom Krazit**. Today: Gemini 4: The covers are off; HSBC's CTO wants to \"hollow out\" his mainframes; Alex Stamos chides OpenAI's Dean Ball for \"guy in the discourse\" comments as Frontier Labs vs Infosec*™ *continues, and more.* \n\n*Like what you read? Do forward this email to a friend or colleague! You can* __sign up here__ *to get Runtime for free every week, or* __become a premium member__ *for exclusive interviews and a 50% discount on events.* \n\n### First up: Nestlé's CIO, HSBC's CTO say...\n\nOver the past two weeks I've sat down for in-depth conversations with HSBC's Group CTO Mario Shamtani, and Nestlé's CIO Chris Wright; two self-effacing Brits overseeing two big, if very different IT shops.\n\nHSBC has ~60,000 engineers running, among other things, 7,000 Kubernetes clusters, 2.4 million containers, nearly 65,000 namespaces, and oversees over $3 trillion in assets. Nestlé's the world's largest food and beverage company and its IT operation – via supply chain and other software systems – touches farms, factories, shipping and more.\n\nBoth conversations were illuminating and spanned the manifold traditional technology leadership challenges in large enterprise environments. Agents? (And pressure to automate further?) Sure. But also...\n\nMainframe modernisation; SAP migrations; persistent data challenges that are “people and process” issues as much as technology. Both exclusive interviews are coming soon for premium subscribers to The Stack.\n\nPlease do subscribe ([$300/y, or $30/m](https://www.thestack.technology/membership/).) \n\nYour support is meaningful for us as a bootstrapped, journalist-owned publication. We reinvest every penny/cent back into independent editorial.\n\n### Across The Stack\n\n**Micron mops up:** $8 billion, to $80+ billion in net income in one year. \n\nKV caching's big business these days...\n\n**The comedy of the commons:** \"Hi. I'm Breandán. I'm the Deputy CISO of the British government, which means I work at the center of one of the biggest federated messes in the country.\" That’s a punchy intro by a normally circumspect civil servant who suggests his peers should learn from a Nobel winner and treat their orgs as a commons, not a hierarchy. \n\n**Once more unto the breach, dear friends**: NetScaler attacks continue to escalate. (When a pre-auth RCE vulnerability affecting almost every configuration hits, that’s bad. Censys sees some 40,000 exposed instances.) Mandiant said previously unseen malware is being dropped. \n\nJPMorgan reported the vulnerabilities and is understood to be… unhappy.\n\nPerimeter appliances/load balancers/VPN gateways, networking software; it’s all getting relentlessly targeted. Cisco now has 17’s bugs in CISA’s “known exploited” catalogue; that’s already double last year’s number.\n\nWhat’s a Blue Team to do? Well…\n\n**Rusty agents:** Gemini 4 “Argon” is here and already rewriting it (“core libraries like re2, libgav1 up to 800K+ lines for the Fuchsia Zircon kernel”) in Rust at Google.  You can’t get it yet, but this is what it will cost you.\n\n**A gimlet eye:** Noah Bovenizer turns to [__Gimlet Labs__](https://gimletlabs.ai/?ref=thestack.technology) for our “One to Watch” feature. (what is an “agent-native inference cloud” anyway?) \n\nRead on.\n\nAll that and more on [*The Stack*](https://www.thestack.technology/) this week. \n\n### X marks the spat\n\n- Factory and Cognition [trade](https://x.com/matanSF/status/2105335179502064038?ref=thestack.technology)[barbs](https://x.com/cwdegnan/status/2105366216500183311?ref=thestack.technology) over CRO appointment\n- Alex Stamos is [not impressed](https://x.com/alexstamos/status/2105323834899591393?ref=thestack.technology) with Dean Ball's \"type of guy\" post.\n- (On which note, can [someone check on](https://x.com/cryps1s?lang=en&ref=thestack.technology) Dane Stuckey?)\n- Dev Ittycheria's [clearly p*ssed](https://x.com/tbpn/status/2105411281415209208?ref=thestack.technology) with CJ Desai. (Perhaps[this absolute imbroglio](https://www.thestack.technology/servicenow-army-cio-procurement-complaint/) should have been a clear warning?)\n- Team GLM say [they're the good guys](https://x.com/ZixuanLi_/status/2105120154329977240?ref=thestack.technology) , as Anthropic[misfires](https://x.com/mrgretzky/status/2105255947547345117?ref=thestack.technology)\n- Someone's \"[torturing\" LLMs](https://x.com/Danmar_here/status/2105059762240979283?ref=thestack.technology) on GitHub?[Lordy.](https://www.404media.co/someone-torturing-llms-in-a-robot-prison-has-triggered-the-dumbest-debate-in-ai-yet/?ref=thestack.technology)\n\n### **Stacked up: The week ahead**\n\n**Redis forkers unite!** [__Valkey Conf. kicks off__](https://events.linuxfoundation.org/valkeyconf/?ref=thestack.technology) in Prague on Oct. 5. \n\n**Your favourite ex?** [__WebexOne rekindles relationships__](https://www.webexone.com/?ref=thestack.technology) in Austin, Oct. 5-8\n\n**Landlubbers:** Sailpoint Navigate [__takes to Austin, Texas__](https://www.sailpoint.com/navigate/austin?ref=thestack.technology) on Oct. 5-8.\n\n**What are you smoking?** World AI Summit hits [__Amsterdam__](https://worldsummit.ai/?ref=thestack.technology), Oct. 7-8\n\n### We're also reading:\n\n**\"Insecure reporters\":** Google, Harvard, MIT researchers say [\"LLMs tend to present narratives of success by default](https://arxiv.org/pdf/2609.36139?ref=thestack.technology)\" but a simple nudge can... \n\n**w-OT?** Federal orgs. are [not OTT on their OT security](https://www.gao.gov/products/gao-26-108937?ref=thestack.technology). (Can the burgeoning, big CEO-backing [Alliance for Critical Infrastructure help](https://www.thestack.technology/big-banks-big-tech-big-networks-big-water-team-up-on-cni-security-amid-ai-concerns/)?)\n\n**\"Intimidate everybody\"**? Citi on [What the bond market is telling us...](https://www.citigroup.com/global/news/perspectives/2026/making-it-real-what-bond-market-is-telling-us-deirdre-dunn?ref=thestack.technology) \n\nGet your story in the spotlight. Reach 30,000 absurdly brilliant and influential subscribers. Partner up with The Stack. We run events, do multimedia storytelling, offer newsletter sponsorships and more.\n\n[Get a deck. Have a chat.](https://www.partner.thestack.technology/partner-with-us?ref=thestack.technology)", "url": "https://wpnews.pro/news/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler", "canonical_source": "https://www.thestack.technology/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler/", "published_at": "2026-10-01 13:21:26+00:00", "updated_at": "2026-10-01 13:44:49.582441+00:00", "lang": "en", "topics": ["artificial-intelligence", "large-language-models", "ai-products", "developer-tools"], "entities": ["Google", "Gemini 4", "Argon", "Fuchsia Zircon kernel", "NetScaler", "Censys", "Mandiant", "JPMorgan"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler", "markdown": "https://wpnews.pro/news/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler.md", "text": "https://wpnews.pro/news/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler.txt", "jsonld": "https://wpnews.pro/news/runtime-the-polycurious-ciso-enter-gemini-4-jpmorgan-punches-holes-in-netscaler.jsonld"}}