TLDR IT 2026-08-21

Save your seat here.

CITRIX URGES ADMINS TO PATCH NEW NETSCALER FLAWS ASAP

Citrix has warned customers to patch two NetScaler vulnerabilities that could enable remote authentication bypass or denial-of-service attacks under specific configurations. The company recommends upgrading affected NetScaler ADC and NetScaler Gateway appliances to specified builds, although it says neither flaw has been observed being exploited. Administrators can inspect configuration strings to determine exposure.

SLACK WANTS TO DRAG AI CODING OUT OF THE TERMINAL AND INTO THE GROUP CHAT

Slack Code brings coding agents, including Claude Code, Devin, GitHub Copilot, and Vercel, directly into shared channels where teams can prompt, review, and steer their work together. Agents operate with the invoking user's permissions, while code channels preserve diffs, previews and activity as a searchable record of the work.

THE SLEEP-PROMOTING RESILIENCE OF BORING INFRASTRUCTURE

Conservative, “boring” infrastructure can improve resilience while reducing operational complexity. Migrating CGI scripts to FastCGI and primary order databases from MySQL to SQLite reported better performance and simpler backups.

FOR ENTERPRISES, THE CAUTIOUS AI ERA HAS BEGUN

The enterprise AI conversation is shifting from broad experimentation toward tighter scrutiny of cost, governance, workforce impact and actual business value. Companies are increasingly narrowing deployments around measurable use cases as token consumption and usage-based pricing make unrestricted AI adoption harder to justify.

NANOCLAW COMES TO SLACK, LETTING YOU CREATE PERSISTENT AI AGENT TEAMS AND COLLEAGUES FROM A SINGLE MESSAGE

NanoClaw's new Slack integration lets users create entire teams of persistent AI agents from a single message, with each agent getting its own identity, memory, permissions, tools, and Slack presence. The agents remain self-hosted on customer infrastructure and can collaborate through Slack channels and Canvases, positioning Slack itself as a workspace where employees can dynamically create and manage specialized digital coworkers.

SERVAL'S SUPER AGENT CATALYST CREATES ROVING BACKGROUND AGENTS TO IDENTIFY AND FIX IT ISSUES BEFORE THEY'RE TICKETED

Serval has made Catalyst generally available, an admin-facing AI agent that analyzes ticket history, SOPs, and connected systems to identify repetitive IT work and build the workflows needed to automate it. It can also create background agents that proactively detect issues across systems and propose fixes before employees submit tickets, with generated automations remaining subject to admin permissions and approval.

DELTA FLIGHT DISRUPTED WITH WI-FI HACK

A Delta flight from Las Vegas to Atlanta was disrupted after someone allegedly interfered with the plane's Wi-Fi and created a rogue network called “Delta WiFi Fast” that led passengers to a phishing-style login page. Federal authorities are investigating. The incident happened shortly after Black Hat and DEF CON. No perpetrator has been identified.

REMOTE MCP, OAUTH, AND ENTERPRISE AUTH

Model Context Protocol (MCP) is transitioning from local standard I/O to multi-tenant cloud environments using HTTP and standard authentication. Moving MCP to the cloud replaces local subprocesses with streamable HTTP and Server-Sent Events while securing access via OAuth 2.1 and PKCE bearer tokens.

AS WORKPLACE SURVEILLANCE GROWS, EXPERTS SAY IT'S GOOD TO KNOW THE WAYS YOUR EMPLOYER IS WATCHING

Employee monitoring has expanded beyond traditional endpoint management into location, communications, application activity, and productivity data. The trend is creating a growing governance challenge around how workplace telemetry is collected, interpreted, and disclosed to employees.

CLAUDE ENTERPRISE CONSUMPTION GUIDE

Claude Enterprise's consumption guide explains how administrators can control shared, usage-based spending across chat, coding, agentic, and integrated surfaces.

ALLOWLISTED DOMAINS API NOW GENERALLY AVAILABLE

Workspace admins can now programmatically manage allowlisted domains instead of making every change manually in the Admin Console.