⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

A recently registered domain that was previously used as placeholder text in approximately 1,700 repositories is now being used to serve malicious content. This incident highlights how forgotten assumptions can become vulnerable attack surfaces. The past week also saw attackers exploiting weak service accounts, old bugs, and exposed systems, as well as using phishing kits and easy exploit paths to carry out their attacks. Various vulnerabilities and weaknesses were leveraged by attackers to gain an advantage. The week was marked by a range of threats, including some that were easily exploitable. Attackers were able to take advantage of these weaknesses to launch successful attacks.