F5 Labs

Despite how they sound, Spring4Shell and the related vulnerabilities in the Spring Framework aren’t exactly like Log4Shell. Learn how they work and what you can do.

Despite how they sound, Spring4Shell and the related vulnerabilities in the Spring Framework aren’t exactly like Log4Shell. Learn how they work and what you can do.

The applications we need to run inside our organizations can turn malicious, so how can we architect for this?

The applications we need to run inside our organizations can turn malicious, so how can we architect for this?

Distributed denial-of-service attacks soared in complexity and size during 2021. While the overall number of DDoS attacks declined marginally compared with 2020, the F5 Silverline team saw the largest attack in 2021 peak at nearly 1.4 Tbps, 5.5 times larger than the largest attack in 2020.

Distributed denial-of-service attacks soared in complexity and size during 2021.

Practical, relatively easy to perform actions that companies of different security postures can take immediately, based on the overall maturity of their existing security program. Because saying "just patch" isn't helpful.

Practical, relatively easy to perform actions that companies of different security postures can take immediately, based on the overall maturity of their existing security program. Because saying "just patch" isn't helpful.

Learn how the threat landscape evolved in 2021 so you can tune your defenses to suit.

Learn how the threat landscape evolved in 2021 so you can tune your defenses to suit.

Access control is an essential aspect of information security that enables organizations to protect their most critical resources by controlling who has access to them.

Access control is an essential aspect of information security that enables organizations to protect their most critical resources by controlling who has access to them.

Managing online privacy is a balancing act for both users and security professionals. We can do better than simply following privacy regulations such as the GDPR and CPRA.

Managing online privacy is a balancing act for both users and security professionals. We can do better than simply following privacy regulations such as the GDPR and CPRA.

We asked a diverse group of F5 security experts about cybersecurity in 2022. Here’s what they said. We look at cyber-war, cyber-crime, the cloud, the supply chain, encryption keys, and new ransomware targets.

We asked a diverse group of F5 security experts about cybersecurity in 2022. Here’s what they said. We look at cyber-war, cyber-crime, the cloud, the supply chain, encryption keys, and new ransomware targets.

A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.

A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.

Moving to the cloud has benefits, but it must be balanced against the likelihood of outages in single-provider environments.

Moving to the cloud has benefits, but it must be balanced against the likelihood of outages in single-provider environments.