Top 12 Most Routinely Exploited vulnerabilities in 2022
Cybersecurity security agencies from the United States, United Kingdom, Australia, Canada and New Zealand have published the top 12 routinely exploited vulnerabilities in 2022.
BIG-IP
Top CVEs targeted by PRC state-sponsored cyber actors
The FBI, NSA and CISA coauthored a joint Cybersecurity Advisory detailing how People’s Republic of China (PRC) state-sponsored cyber actors continue to exploit common, publicly known vulnerabilities used since 2020 to “actively target U.S. and allied networks.”
F5 fixes 12 High severity vulnerabilities in BIG-IP and BIG-IQ products
F5 has released fixes for 12 High severity vulnerabilities that affect BIG-IP and BIG-IQ products.
Attackers could exploit Critical F5 BIG-IP vulnerability to execute arbitrary commands
Unauthenticated attackers could exploit a Critical BIG-IP iControl REST vulnerability CVE-2022-1388 to execute arbitrary system commands, create or delete files, or disable services on BIG-IP systems.
F5 releases August security advisory for BIG-IP and BIG-IQ
F5 has released the August security advisory for BIG-IP and BIG-IQ products that address multiple High risk vulnerabilities.
Top 30 most commonly exploited vulnerabilities over 2020 and 2021
Cybersecurity experts from Australia, U.K., and U.S. governments have released a list of the most commonly exploited vulnerabilities over 2020 and 2021.
Critical F5 BIG-IP vulnerability (CVE-2021-22986) under active attack
Security researchers are warning of mass scans and active exploits of a Critical vulnerability on F5 BIG-IP and BIG-IQ infrastructure. F5 patched the Critical remote code execution vulnerability CVE-2021-22986 nearly two weeks ago when the networking company confirmed an unauthenticated attacker could exploit the vulnerability.
APT actors exploit legacy internet-facing vulnerabilities in combination with Zerologon to target organizations
Advanced persistent threat actors (APTs) are exploiting multiple legacy vulnerabilities in combination with newer “Zerologon” to target government networks, critical infrastructure, and elections organizations.
Chinese threat actors targeting U.S. government agencies and these 4 CVEs
Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.
F5 patches Critical RCE vulnerability (CVE-2020-5902) in BIG-IP configuration utility
F5 has patched a Critical remote code execution (RCE) vulnerability (CVE-2020-5902) in the Configuration utility of BIG-IP. Researchers further discovered 8,000 devices were vulnerable on the internet and could result in full system compromise.