F5 Labs

The Mirai botnet has infected hundreds of thousands of Internet of Things (IoT) devices, specifically security cameras, by using vendor default passwords for Telnet access.

F5 Labs analysts discovered a target pattern in the IBAN number formats as well as weekly changes to the script injection content. In May 2016, the F5 Security Operations Center (SOC) detected a generic form grabber and IBAN (International Bank...

F5 Labs analysts discovered a target pattern in the IBAN number formats as well as weekly changes to the script injection content. In May 2016, the F5 Security Operations Center (SOC) detected a generic form grabber and IBAN (International Bank...

F5 CISO Mike Convertino on things to keep in mind when developing a security approach to overcome the lack of visibility in the cloud. When Securing Your Applications, Seeing is Believing

HEIST is an example of how risk and threat are different, and why the distinction matters.

HEIST is an example of how risk and threat are different, and why the distinction matters.

Malicious actors and eavesdroppers are forcing Internet communication into a single cryptographic protocol: SSL.

Malicious actors and eavesdroppers are forcing Internet communication into a single cryptographic protocol: SSL.

Customer engagement drives web application design, but user-generated content brings inherent security challenges.

Customer engagement drives web application design, but user-generated content brings inherent security challenges.

Some of you may remember a time when national security was a question of the Army’s defence against international threats. Today, that picture looks very different. If anything,...

And we're watching Dridex. Here's the latest in this malware's evolution.

And we're watching Dridex. Here's the latest in this malware's evolution.

DDoS attacks have been common since the late 2000s, but average attack peaks have increased to 100+ Gbps.

DDoS attacks have been common since the late 2000s, but average attack peaks have increased to 100+ Gbps.

Anonymous commoditizes well-known DDoS attacks by making easy-to-use tools, available to even the most unsophisticated user.

Anonymous commoditizes well-known DDoS attacks by making easy-to-use tools, available to even the most unsophisticated user.

Webinject crafting is a separate profession now. Hackers write webinjects and sell them to fraudsters, who use them to weaponize Trojans.

Webinject crafting is a separate profession now. Hackers write webinjects and sell them to fraudsters, who use them to weaponize Trojans.

Ongoing campaign analysis has revealed that Dridex malware's latest focus has strongly shifted in recent months to US banks.