The Week Trusted Software Turned Hostile: ShareFile, Citrix Bleed 2, and AI Coding Attacks
Automated bug-hunting is cutting both ways, and old flaws are still landing hits because patches sat in a queue.
Key points
- Attackers are using the same automated bug-finding tools as defenders, but without the paperwork or the patience.
- Ransomware crews are still exploiting a Citrix flaw known as Citrix Bleed 2, months after a fix was available.
- Citrix ShareFile, a file-sharing service used by businesses, is being abused to deliver attacks that ride in on trusted software.
- AI coding assistants have become a fresh target, with criminals slipping malicious instructions into the tools developers rely on.
- Most of this week's incidents trace back to patches that existed but were not applied in time.
Somewhere right now, a piece of security software is finding bugs faster than any human can triage them. That is meant to be the good news. Criminals have identical tools, pointed the other way. No tickets filed, no maintenance windows respected.
That is the shape of the week, according to a roundup first published by The Hacker News. Trusted software is turning on the people who installed it. Flaws from last year are still landing hits because the fix sat waiting too long.
What actually happened this week?
Three threads are worth pulling on, and each touches ordinary users more than it looks.
The first is Citrix Bleed 2, a nickname for a serious flaw in Citrix's remote-access gear. The bug lets attackers grab session tokens, the digital passes your browser holds after you sign in. Steal the pass, skip the login, including the second approval step on your phone known as multi-factor authentication (MFA).
Ransomware crews, criminals who lock up a company's files and demand payment, are actively using this flaw. We first reported on their tactics on 2 July, when Anubis affiliates were chaining the bug with stolen credentials to sidestep MFA entirely. A patch exists. Not everyone has installed it.
MFA alone would not have stopped this. When an attacker steals the session token after you have already logged in, your phone approval has already happened. The industry's answer is token binding and shorter session lifetimes: tie the digital pass to the specific device that earned it, so a thief cannot carry it away.
The ShareFile problem
Citrix ShareFile is a file-sharing service companies use to send documents to clients. Attackers are now abusing it to deliver malicious files wrapped in a name the recipient trusts. Progress, the maker of ShareFile, told on-premises customers to shut down their servers while investigating what it called a credible external threat.
If a link comes from ShareFile, it looks legitimate. Staff have been trained for years to trust known brands in the sender line. That training is now working against them.
AI coding assistants under attack
Developers increasingly use AI assistants to write code. Researchers have shown that attackers can plant hidden instructions in places the AI reads, such as public code repositories or documentation pages. The AI then follows those instructions quietly, writing code that includes a back door or leaks a secret key.
This is called prompt injection. Think of it as graffiti only the robot can see, and the robot does what the graffiti says. We explored a related trust failure across multiple incident types the week of 6 July.
Should you worry about your own exposure?
If your employer uses Citrix products, ask whether the Citrix Bleed 2 patch is applied. It is a fair question. If a ShareFile link arrives unexpectedly, confirm it with the sender through a separate channel before opening anything.
Developers using AI assistants should treat generated code the way they would treat code from an unknown contributor online. Read it. Test it. Do not paste it into production because it looked confident.
Patches unapplied, trust misplaced, new tools racing past the safety rails: none of this is exotic. Same pattern, different week.
