F5 Labs

Telecom touches everything that everyone does, and the insertion points are nearly limitless. F5 Labs' Preston Hogue writes for SecurityWeek, discussing the specific prevention measures telecom providers can take to protect themselves and their customers.

The three most effective steps you can take in under an hour to guard against identity theft.

In part two of this three-part series, we dive deeper into CMMC, look at CMMC control sets in more detail, and discuss how to prepare for an audit.

This is the most in-depth version of the 2019 Application Protection Report. It contains research and data from all of the 2019 episodes, updated with 2019 breach trends that paint a clearer picture of where application threats are heading. Cancel some afternoon meetings and take a deep dive with us!...

The shift to cloud-based services doesn't eliminate risk, and it doesn't mean the risk becomes someone else's problem. F5 Labs' Ray Pompon writes for Data Centre Review Magazine, discussing the specific strategies you can take to keep your cloud safe.

Learn about authentication, authorization, and security misconfiguration in API compromises by exploring this capture-the-flag game.

COVID-19 has turned the tech world upside down. Read what a future IT director thought we did right—and what went terribly wrong.

Attackers are targeting financial services organizations with brute force, credential stuffing, and DoS attacks. See how you can mitigate the risks.

New Mirai variant references the COVID-19 pandemic with a filename change and two targets: Huawei routers and TeamSpeak.

Ransomware is alive and kicking, and local governments seem to be getting the worst of it. How can organisations best secure themselves against this threat? F5 Labs' David Warburton discusses the issue with ITProPortal.

Learn about cross-site scripting (XSS), how it works, and how to protect against it.

Over 700 survey respondents from different generations shared their views about the IoT and the tradeoffs between privacy and convenience.

The rush to deploy remote access solutions can bring unexpected risks to light.

The Canadian threat landscape was characterized by a large amount of attack traffic from in-county systems, which can be the most difficult to filter.

The Australian threat landscape closely mirrored the threats we observed in Asia, with an added focus on NetBIOS port 139.

The attack landscape targeting US systems was characterized by a large amount of traffic directed at web applications and web app databases.

Companies doing business with the Department of Defense must soon be audit certified under something called the CMMC. The depth required will depend on the amount of Controlled Unclassified Information a company handles.

Talent scarcity is making it hard to fill headcount. But what do you do in the meantime? F5's Gail Coury writes for Disruptive.Asia, discussing what types of managed services make sense to give you a hand with security issues.

The Russian threat landscape is unique from other regions of the world in that it had the most unique attacking IP addresses.

European systems saw large volumes of attack traffic coming from in-region IP addresses attempting to conduct abusive port scanning.