Threat actors are scanning the Internet for Citrix systems affected by the recently disclosed vulnerabilities.