Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, and AI Coding Attacks

The Hacker News weekly recap reports several active, high-risk incidents: Progress Software ordered immediate shutdown of self-hosted ShareFile Storage Zone Controller servers (likely unpatched zero-day or compromise); Citrix NetScaler CVE-2025-5777 is being actively exploited by ransomware groups (DragonForce and Anubis) using a shared seven-step playbook that bypasses MFA and results in large-scale ransomware deployments; researchers also demonstrated prompt-injection chains leading to remote code execution across multiple AI coding assistants, while a new phishing-as-a-service (Forg365) and thousands of exposed MCP servers expand the threat surface—organizations are advised to shut affected services, patch immediately, terminate sessions, and audit for compromise.