F5 fixes 12 High severity vulnerabilities in BIG-IP and BIG-IQ products
F5 has released fixes for 12 High severity vulnerabilities that affect BIG-IP and BIG-IQ products.
F5
F5 releases August security advisory for BIG-IP and BIG-IQ
F5 has released the August security advisory for BIG-IP and BIG-IQ products that address multiple High risk vulnerabilities.
Top 30 most commonly exploited vulnerabilities over 2020 and 2021
Cybersecurity experts from Australia, U.K., and U.S. governments have released a list of the most commonly exploited vulnerabilities over 2020 and 2021.
Critical F5 BIG-IP vulnerability (CVE-2021-22986) under active attack
Security researchers are warning of mass scans and active exploits of a Critical vulnerability on F5 BIG-IP and BIG-IQ infrastructure. F5 patched the Critical remote code execution vulnerability CVE-2021-22986 nearly two weeks ago when the networking company confirmed an unauthenticated attacker could exploit the vulnerability.
F5 patches 4 Critical vulnerabilities
F5 has patched two Critical remote code execution (RCE) and another two buffer overflow vulnerabilities that impact BIG-IP and BIG-IQ devices. Moreover, the security firm also addressed two other High severity bugs and one Medium severity flaw.
APT actors exploit legacy internet-facing vulnerabilities in combination with Zerologon to target organizations
Advanced persistent threat actors (APTs) are exploiting multiple legacy vulnerabilities in combination with newer “Zerologon” to target government networks, critical infrastructure, and elections organizations.
Chinese threat actors targeting U.S. government agencies and these 4 CVEs
Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.
F5 patches Critical RCE vulnerability (CVE-2020-5902) in BIG-IP configuration utility
F5 has patched a Critical remote code execution (RCE) vulnerability (CVE-2020-5902) in the Configuration utility of BIG-IP. Researchers further discovered 8,000 devices were vulnerable on the internet and could result in full system compromise.
libssh security vulnerability, vendor updates and POC exploit
libssh issued an important security and maintenance release earlier this week to address a critical authentication bypass vulnerability (CVE-2018-10933).