F5 Labs

Our top talker changes up their infrastructure, and CVE-2023-1389 continues to hold the top spot.

What can last year’s Black Friday shopping trends teach us about expected attacker behavior during the 2024 holiday shopping season?

The growing capability of AI content poses three very real threats to modern elections. We explain each, and take a glimpse at a possible solution to the growing AIpocalypse.

Plus a few interesting changes in the CVEs we track, and some notes on just what kinds of malware stagers we see.

Overall scanning for CVEs we track is down, but one specific scanner caught our attention. We dig into what it’s doing.

Fighting sophisticated scrapers requires advanced detection methods. Discover the techniques needed to identify and manage these hidden threats outlined in our investigation.

Last issue, we observed huge amounts of scanning for the rather old CVE-2017-9841, an RCE in PHPUnit. This time it’s fallen off nearly as sharply. We look into why!

Data miners and scraper bots are everywhere, feeding AI LLMs and more, and many of them are NOT harmless.

The rather old CVE-2017-9841, an RCE in PHPUnit, suddenly jumps to the top of our list, with an increase of nearly 400% since last month. We dig into the scanning infrastructure.

Unveiling the rise of Hacktivism in a tense global climate.

The TP-Link Archer AX21 Wifi Router vulnerability CVE-2023-1389 experiences massive targeting along with a rather old critical RCE in PHPUnit.

Threat actors double down with their botnet building efforts. Vulnerable Netgear routers join exploitable TP-Link and other IoT devices, expanding attacker DDoS capabilities.

TP-Link Archer AX21 Wifi Router targeting, plus a handful of new CVEs! See what mass scanning looks like in March 2024.

27 new CVEs, and continued IoT targeting. See what's new from February 2024.

Learn the latest trends in bots and malicious automation so you can compare with attacks against your own organizations.

Gail Coury explores how cybersecurity has evolved and what the future holds, after a distinguished career as a CISO.

More IoT Targeting, plus a bunch of new CVEs! See what attackers went after in January 2024.

How automated fraudsters tried to ruin a restaurant’s promotional contest.

We add 6 CVEs to our list and do a brief roundup of some stats from 2023.

We add two IoT CVEs and discuss the other sorts of traffic we see regularly.