Citrix issues a critical update as NSA warns that the APT5 threat group is actively trying to target ADC environments.