cve-2025-53521
66 articles with this tag
✨
AI summary
Loading…
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
Stealth rootkit targeting F5 BIG-IP could expose enterprise identity gateways
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day
Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs
Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign
Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
Bulletin d'actualité CERTFR-2026-ACT-015 (07 avril 2026)
[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk
The Hidden Cost of Recurring Credential Incidents
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers
6th April – Threat Intelligence Report
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools
BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture
New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images
Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action
Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks
Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
Eclypsium Detects F5 BIG-IP Remote Code Execution Vulnerability (CVE-2025-53521)
Block the Prompt, Not the Work: The End of "Doctor No"
Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms
Android Developer Verification Rollout Begins Ahead of September Enforcement
5-month-old F5 BIG-IP DoS bug becomes critical RCE exploited in the wild
TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks
Vulnérabilité dans F5 BIG-IP Access Policy Manager (31 mars 2026)
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains
The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority
NCSC Urges Immediate Patching of F5 BIG-IP Bug
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
Fortinet BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
3 SOC Process Fixes That Unlock Tier 1 Productivity
The State of Secrets Sprawl 2026: 9 Takeaways for CISOs
Hackers now exploit critical F5 BIG-IP flaw in attacks, patch now
Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels
F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild
Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
CISA Adds One Known Exploited Vulnerability to Catalog
NCSC-2025-0319 [1.01] [M/H] Kwetsbaarheden verholpen in F5 Networks BIG-IP, F5OS en NGINX App Protect WAF