F5 Labs

The rather old CVE-2017-9841, an RCE in PHPUnit, suddenly jumps to the top of our list, with an increase of nearly 400% since last month. We dig into the scanning infrastructure.

Unveiling the rise of Hacktivism in a tense global climate.

The TP-Link Archer AX21 Wifi Router vulnerability CVE-2023-1389 experiences massive targeting along with a rather old critical RCE in PHPUnit.

Threat actors double down with their botnet building efforts. Vulnerable Netgear routers join exploitable TP-Link and other IoT devices, expanding attacker DDoS capabilities.

TP-Link Archer AX21 Wifi Router targeting, plus a handful of new CVEs! See what mass scanning looks like in March 2024.

27 new CVEs, and continued IoT targeting. See what's new from February 2024.

Learn the latest trends in bots and malicious automation so you can compare with attacks against your own organizations.

Gail Coury explores how cybersecurity has evolved and what the future holds, after a distinguished career as a CISO.

More IoT Targeting, plus a bunch of new CVEs! See what attackers went after in January 2024.

How automated fraudsters tried to ruin a restaurant’s promotional contest.

We add 6 CVEs to our list and do a brief roundup of some stats from 2023.

We add two IoT CVEs and discuss the other sorts of traffic we see regularly.

To quote the late David Foster Wallace: sure, I’m paranoid—but am I paranoid enough?

The fourth and final part of a series investigating how automation is used to create fake accounts for fraud, disinformation, scams, and account takeover.

Despite an overall downward trend, an old favorite comes back into play.

Did automation targeting retail companies rise towards Black Friday 2022?

Part three of a series investigating how automation is used to create fake accounts for fraud, disinformation, scams, and account takeover.

Welcome to the fun-size version of our 2023 Identity Threat Report! If you only have 5 minutes to spare this is the place to start - and you can always download the full PDF for later.

We are excited to announce a new report covering threats to digital identities. This report goes into detail on credential stuffing, phishing, and multifactor authentication bypass techniques.

We added another signature (for CVE-2020-0618) and we take a look at a cred stuffing attack from last month. One formerly prevalent CVE has disappeared entirely, and we investigate why that happened.