Campaign Targets Amazon EC2 Instance Metadata via SSRF
Discover the latest CVE trends and a new campaign targeting websites hosted in EC2 instances on AWS.
F5 Labs
2025 Advanced Persistent Bot Report: Scraper Bots Deep-Dive
1 week 5 days ago
How much do scraper bots affect your industry?
Prevent Web Scraping by Applying the Pyramid of Pain
1 week 5 days ago
The Bots Pyramid of Pain: a framework for effective bot defense.
2025 Advanced Persistent Bots Report
1 week 5 days ago
Uncovering the true scale of persistent bot activity, and the advanced techniques that bot operators use in order to remain hidden from bot defenses.
Analyzing the Global Increase in Vulnerability Scanning in 2024
2 weeks 5 days ago
BotPoke comes to the foreground yet again.
Why Critical MongoDB Library Flaws Won't See Mass Exploitation
3 weeks 6 days ago
Discover how to mitigate CVE-2024-53900 and CVE-2025-23061, which expose Node.js APIs to remote attacks.
Enterprises Should Consider Replacing Employees’ Home TP-Link Routers
1 month ago
An examination of CVE trends from February 2025 scanning data.
2024 Vulnerability Scanning Surges 91%
1 month 2 weeks ago
Scans intensify, looking for a critical vulnerability in TBK DVR devices.
Continued Scanning for CVE-2023-1389
2 months 2 weeks ago
TP-Link draws the attention of the US Government.
The Dangers of DNS Hijacking
3 months ago
How expired domains and improper DNS management can lead to severe security risks like MitM attacks, fraudulent TLS/SSL certifications, and more.
2025 Cybersecurity Predictions
3 months 3 weeks ago
“I never think of the future. It comes soon enough.”
Scanning For Credentials, and BotPoke Changes IPs Again
4 months ago
Nearly 50% of observed traffic is looking for accidentally exposed data.
BotPoke Scanner Switches IP
4 months 2 weeks ago
Our top talker changes up their infrastructure, and CVE-2023-1389 continues to hold the top spot.
Black Friday Versus The Bots
4 months 2 weeks ago
What can last year’s Black Friday shopping trends teach us about expected attacker behavior during the 2024 holiday shopping season?
Three Ways AI Can Hack the U.S. Election
5 months 1 week ago
The growing capability of AI content poses three very real threats to modern elections. We explain each, and take a glimpse at a possible solution to the growing AIpocalypse.
Continued Intense Scanning From One IP in Lithuania
5 months 2 weeks ago
Plus a few interesting changes in the CVEs we track, and some notes on just what kinds of malware stagers we see.
A Single IP is Scanning Intensely, and Yields a List of Malware Loaders
6 months 2 weeks ago
Overall scanning for CVEs we track is down, but one specific scanner caught our attention. We dig into what it’s doing.
How to Identify and Stop Scrapers
7 months ago
Fighting sophisticated scrapers requires advanced detection methods. Discover the techniques needed to identify and manage these hidden threats outlined in our investigation.
Scanning for CVE-2017-9841 Drops Precipitously
7 months 2 weeks ago
Last issue, we observed huge amounts of scanning for the rather old CVE-2017-9841, an RCE in PHPUnit. This time it’s fallen off nearly as sharply. We look into why!
What Are Scrapers and Why Should You Care?
8 months 1 week ago
Data miners and scraper bots are everywhere, feeding AI LLMs and more, and many of them are NOT harmless.
Checked
4 hours 36 minutes ago
RSS for all F5 Labs content.
F5 Labs feed