F5 has released security updates to fix a critical zero-day vulnerability in its BIG-IP Access Policy Manager (APM) that is being actively exploited in the wild.
F5 has released hotfixes for a critical zero-day vulnerability in its BIG-IP Access Policy Manager that allows unauthenticated attackers to execute remote code.
Cisco Talos has identified CLOSEDQUORUM, a new malware architecture that uses a panel of large language models to automate command-and-control decisions.
A new attack known as TrustSink allows attackers with privileged access to register rogue MFA providers that capture user passwords during legitimate Microsoft Entra logins.
A Chinese-speaking threat actor exploited vulnerabilities in ZyXEL GS1900 switches and WordPress to steal over 18,500 records from backend databases.
