Latest F5 news

Hackers use F5 BIG-IP malware to stealthily steal data for years

A group of suspected Chinese cyberespionage actors named 'Velvet Ant' are deploying custom malware on F5 BIG-IP appliances to gain a persistent connection to the internal network and steal data.
- Bill Toulas
- June 17, 2024
- 01:37 PM
- 2
New BIG-IP Next Central Manager bugs allow device takeover

F5 has fixed two high-severity BIG-IP Next Central Manager vulnerabilities, which can be exploited to gain admin control and create rogue accounts on any managed assets.
- Sergiu Gatlan
- May 08, 2024
- 03:52 PM
- 0
Fake F5 BIG-IP zero-day warning emails push data wipers

The Israel National Cyber Directorate warns of phishing emails pretending to be F5 BIG-IP zero-day security updates that deploy Windows and Linux data wipers.
- Lawrence Abrams
- December 20, 2023
- 04:52 PM
- 1
Hackers exploit recent F5 BIG-IP flaws in stealthy attacks

F5 is warning BIG-IP admins that devices are being breached by "skilled" hackers exploiting two recently disclosed vulnerabilities to erase signs of their access and achieve stealthy code execution.
- Bill Toulas
- November 01, 2023
- 10:52 AM
- 0
F5 fixes BIG-IP auth bypass allowing remote code execution attacks

A critical vulnerability in the F5 BIG-IP configuration utility, tracked as CVE-2023-46747, allows an attacker with remote access to the configuration utility to perform unauthenticated remote code execution.
- Bill Toulas
- October 27, 2023
- 11:11 AM
- 0
F5 fixes two remote code execution flaws in BIG-IP, BIG-IQ

F5 has released hotfixes for its BIG-IP and BIG-IQ products, addressing two high-severity flaws allowing attackers to perform unauthenticated remote code execution (RCE) on vulnerable endpoints.
- Bill Toulas
- November 17, 2022
- 11:18 AM
- 0
CISA shares guidance to block ongoing F5 BIG-IP attacks

In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388).
- Sergiu Gatlan
- May 18, 2022
- 11:20 AM
- 0
CISA tells federal agencies to fix actively exploited F5 BIG-IP bug

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices.
- Sergiu Gatlan
- May 11, 2022
- 10:35 AM
- 0
Critical F5 BIG-IP vulnerability exploited to wipe devices

A recently disclosed F5 BIG-IP vulnerability has been used in destructive attacks, attempting to erase a device's file system and make the server unusable.
- Lawrence Abrams
- May 10, 2022
- 06:50 PM
- 0
Hackers exploiting critical F5 BIG-IP bug, public exploits released

Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads.
- Ionut Ilascu
- May 09, 2022
- 11:20 AM
- 0
Exploits created for critical F5 BIG-IP flaw, install patch immediately

Security researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.
- Lawrence Abrams
- May 08, 2022
- 12:35 PM
- 0
F5 warns of critical BIG-IP RCE bug allowing device takeover

F5 has issued a security advisory warning about a flaw that may allow unauthenticated attackers with network access to execute arbitrary system commands, perform file actions, and disable services on BIG-IP.
- Bill Toulas
- May 04, 2022
- 06:16 PM
- 0
Critical F5 BIG-IP bug impacts customers in sensitive sectors

BIG-IP application services company F5 has fixed more than a dozen high-severity vulnerabilities in its networking device, one of them being elevated to critical severity under specific conditions.
- Ionut Ilascu
- August 25, 2021
- 02:58 PM
- 0
Critical F5 BIG-IP vulnerability now targeted in ongoing attacks

Cybersecurity firm NCC Group said on Thursday that it detected successful in the wild exploitation of a recently patched critical vulnerability in F5 BIG-IP and BIG-IQ networking devices.
- Sergiu Gatlan
- March 19, 2021
- 01:09 PM
- 0
F5 urges customers to patch critical BIG-IP pre-auth RCE bug

F5 Networks, a leading provider of enterprise networking gear, has announced four critical remote code execution (RCE) vulnerabilities affecting most versions of BIG-IP and BIG-IQ software.
- Sergiu Gatlan
- March 10, 2021
- 12:04 PM
- 0
US govt: China-sponsored hackers targeting Exchange, Citrix, F5 flaws

Today, the US government issued an advisory on China-sponsored hackers attacking government agencies through vulnerabilities in Microsoft Exchange, Citrix, Pulse, and F5 devices and servers.
- Lawrence Abrams
- September 14, 2020
- 12:47 PM
- 0
Iranian hackers are selling access to corporate networks

An Iranian-backed hacker group has been observed while seeking to sell access to compromised corporate networks to other threat actors on underground forums and attempting to exploit F5 BIG-IP devices vulnerable to CVE-2020-5902 exploits.
- Sergiu Gatlan
- September 01, 2020
- 01:55 PM
- 0
FBI: Iranian hackers trying to exploit critical F5 BIG-IP flaw

The FBI warns of Iranian hackers actively attempting to exploit an unauthenticated remote code execution flaw affecting F5 Big-IP application delivery controller (ADC) devices used by Fortune 500 firms, government agencies, and banks.
- Sergiu Gatlan
- August 08, 2020
- 05:00 AM
- 0
US govt confirms active exploitation of F5 BIG-IP RCE flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) today published a warning regarding the active exploitation of the unauthenticated remote code execution (RCE) CVE-2020-5902 vulnerability affecting F5 Big-IP ADC devices.
- Sergiu Gatlan
- July 24, 2020
- 03:29 PM
- 0
Mitigating critical F5 BIG-IP RCE flaw not enough, bypass found

F5 BIG-IP customers who only applied recommended mitigations and haven't yet patched their devices against the unauthenticated remote code execution (RCE) CVE-2020-5902 vulnerability are now advised to update them against a recently found bypass.
- Sergiu Gatlan
- July 07, 2020
- 03:56 PM
- 0