F5 Warns Australian IT of Social Engineering Risk Escalation Due to Generative AI

F5 says an artificial intelligence war could start between generative AI-toting bad actors and enterprises guarding data with AI. Australian IT teams will be caught in the crossfire. Continue reading F5 Warns Australian IT of Social Engineering Risk Escalation Due to Generative AI

This Week in Security: F5 Twitter PoC, Certifried, and Cloudflare Pages Pwned

F5’s BIG-IP platform has a Remote Code Execution (RCE) vulnerability: CVE-2022-1388. This one is interesting, because a Proof of Concept (PoC) was quickly reverse engineered from the patch and released …read more Continue reading This Week in Security: F5 Twitter PoC, Certifried, and Cloudflare Pages Pwned

Why F5 spent $2.2B on 3 companies to focus on cloud native applications

It’s essential for older companies to recognize changes in the marketplace or face the brutal reality of being left in the dust. F5 is an old-school company that launched back in the 90s, yet has been able to transform a number of times in its history to avoid major disruption. Over the last two years, […] Continue reading Why F5 spent $2.2B on 3 companies to focus on cloud native applications

F5 snags Volterra multi-cloud management startup for $500M

Applications networking company F5 announced today that it is acquiring Volterra, a multi-cloud management startup, for $500 million. That breaks down to $440 million in cash and $60 million in deferred and unvested incentive compensation. Volterra emerged in 2019 with a $50 million investment from multiple sources, including Khosla Ventures and Mayfield, along with strategic […] Continue reading F5 snags Volterra multi-cloud management startup for $500M

Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks

The Feds have published a Top 25 exploits list, rife with big names like BlueKeep, Zerologon and other notorious security vulnerabilities. Continue reading Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks

Zeek in it’s sweet spot: Detecting F5’s Big-IP CVE10 (CVE-2020-5902)

By Ben Reardon, Corelight Security Researcher Having a CVE 10 unauthenticated Remote Code Execution vulnerability on a central load balancing device? That’s bad… Not being able to detect when a threat actor attempts and/or succeeds in compr… Continue reading Zeek in it’s sweet spot: Detecting F5’s Big-IP CVE10 (CVE-2020-5902)

Thousands of Vulnerable F5 BIG-IP Users Still Open to Takeover

Less than 500 machines have been patched since U.S. Cyber Command issued an alert to patch a critical bug that’s under active exploit. Continue reading Thousands of Vulnerable F5 BIG-IP Users Still Open to Takeover

F5 BIG-IP Has Huge, Enormous, Bad, Scary Security Holes (Patch NOW)

Drop everything: A CVSS score of 10 is as bad as it gets. This F5 BIG-IP vulnerability lets crims pwn your entire network.
The post F5 BIG-IP Has Huge, Enormous, Bad, Scary Security Holes (Patch NOW) appeared first on Security Boulevard.
Continue reading F5 BIG-IP Has Huge, Enormous, Bad, Scary Security Holes (Patch NOW)