⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

This week's incidents expose three distinct but equally dangerous attack surfaces: a $387M crypto exchange breach attributed to North Korean state-sponsored actors underscores how exchanges remain high-value targets with inadequate access controls; actively exploited Citrix NetScaler vulnerabilities demonstrate that unpatched internet-facing infrastructure continues to be low-hanging fruit for attackers; and the registration of a commonly used placeholder domain ('third-party[.]com') affecting ~1,700 repositories reveals how developers inadvertently introduce supply chain risk by referencing unregistered or abandoned domains in code. Collectively, these incidents matter because they show attackers operating across financial, infrastructure, and software supply chain vectors simultaneously. Organizations that lack rapid patching cadences, dependency hygiene practices, and real-time monitoring are exposed on multiple fronts at once.