Citrix urges immediate patching of two newly disclosed vulnerabilities.

Top cybersecurity developments: Citrix urged immediate patching for two critical NetScaler vulnerabilities; attackers injected malicious build-time code into popular Rust crates, likely via a compromised maintainer; Medusa ransomware affiliates have breached 500+ critical infrastructure organizations; Clop claims data theft from GE, Philips, Shell and others via a PTC Windchill RCE; and Latvia’s road traffic agency suffered a breach exposing ~1.2M people’s records. Organizations are urged to patch, segment networks, and enforce phishing-resistant MFA and restricted remote access.