F5 Labs

How a recent data breach investigation led to one CISO facing criminal charges, and what your CISO must strive for to avoid the same fate.

See which vulnerabilities caught attackers’ eyes in December 2022.

Resellers and their bots don’t work alone. A whole ecosystem of partners and facilitators supports them. Learn how they work together and what it means for retailers and defenders.

Learn which vulnerabilities attackers preferred in November.

Far from a minor annoyance, reseller bots create significant problems for manufacturers and retailers. Learn how we got here, why they’re such a problem, and what we can do about it.

F5 Labs and experts across F5 share their experience from the past twelve months to predict what might be the biggest causes for concern in 2023.

We spotted a new Microsoft Exchange zero day and more security infrastructure vulns, as well as all of the usual suspects, in this month’s installment on vulnerability targeting.

Learn which CVEs are top of mind for attackers this autumn.

Analyzing a single attack in detail yields interesting findings about attacker sophistication, living off the land, and architectural risk.

Learn what attackers scanned for last month so you can tune your defenses.

How do you help the C-Suite understand the business risks of cybersecurity? Put them in the equivalent of a cybersecurity escape room.

Learn which CVEs attackers scanned for the most in July 2022, and how it compares with the rest of the year.

Your data is at risk. Are you equipped to combat the risks posed by BlackGuard?

Learn which CVEs attackers scanned for most in the first half of 2022.

Learn what zero trust architecture (ZTA) is and how to apply it to your environment.

We found a novel malware strain that is targeting financial sites in Italy and Spain... so far.

NIST and the UK's NCSC currently recommend not enforcing frequent password changes, and instead to use longer passphrases over shorter passwords. We take a look at the math to see what really makes sense, and arrive at some straightforward suggestions.

Despite how they sound, Spring4Shell and the related vulnerabilities in the Spring Framework aren’t exactly like Log4Shell. Learn how they work and what you can do.

The applications we need to run inside our organizations can turn malicious, so how can we architect for this?

Distributed denial-of-service attacks soared in complexity and size during 2021.