F5 has released security updates to address a critical zero-day vulnerability in BIG-IP APM that attackers are actively exploiting to achieve remote code execution.
The flaw affects F5's BIG-IP Access Policy Manager (APM) and poses significant risk to organizations using the platform for application security and access control. F5 confirmed the vulnerability is being exploited in active attacks, prompting the urgent release of patches.
BIG-IP APM is widely deployed across enterprises for managing secure access to applications and networks. A successful exploit allows attackers to execute arbitrary code on affected systems, potentially granting them control over critical infrastructure.
F5 recommends customers apply available patches immediately. The company has provided guidance on affected versions and mitigation steps for environments where immediate patching is not feasible.
This marks another critical vulnerability in enterprise security infrastructure, following a pattern of high-impact flaws discovered in widely-used application delivery and security platforms. Organizations should prioritize testing and deployment of available fixes.
An Armenian national has been sentenced to two years in prison for participating in Ryuk ransomware attacks targeting U.S. companies. The defendant encrypted victims' systems as part of the notorious cybercriminal operation.
Obscura has launched a VPN service architected to make user activity logging technically impossible. The service uses a no-log-by-design approach rather than relying on policy promises alone.
Hackers claim to have compromised the Federal Bureau of Investigation and obtained personal data on all FBI employees. The breach's scope and authenticity have not yet been independently verified.
Researchers at Cisco Talos developed a new framework to detect malware and hacking tools powered by AI chatbots. The discovery revealed an unusual threat: autonomous malware operating without human handlers.