Introducing the F5 Labs Weekly Threat Bulletin
The F5 Labs Weekly Threat Bulletin The F5 Labs Weekly Threat Bulletin is a weekly report designed to be your earliest warning system, condensing the overwhelming threat landscape into a…
The F5 Labs Weekly Threat Bulletin The F5 Labs Weekly Threat Bulletin is a weekly report designed to be your earliest warning system, condensing the overwhelming threat landscape into a…
Executive Summary On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined…
Active Exploitation of CVE-2025-55182 Critical RCE in React Server Components and Next.js CVE-2025-55182 represents a critical pre-authentication Remote Code Execution (RCE) vulnerability, rated with a CVSS score of 10.0, affecting…
On November 18, 2025, a single configuration file change at Cloudflare disrupted access to large parts of the web. Around 11:20 UTC, Cloudflare’s network began returning a surge of HTTP…
TAMECAT PowerShell Backdoor Targets Edge and Chrome: Login Credentials at Risk TAMECAT is a sophisticated PowerShell-based backdoor attributed to APT42, an Iranian state-sponsored hacking group, designed to steal login credentials…
Executive Summary Claude Skills is a new feature from Anthropic that has gained rapid adoption, with more than 17,000+ GitHub stars already since its launch in October 2025, allowing users to create and share custom code modules that expand…
Introduction The 2026 Winter Games raise the stakes by putting AI systems directly into the operational loop. AI will help run the event at massive scale, which creates new ways…
AI tools have proved their worth in the workplace. They help us write, research, code, plan, and automate. They’re making employees faster and more productive, and helping businesses move and…
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure A massive, worm-driven campaign, attributed to the TeamPCP threat cluster (also known as DeadCatx3, PCPcat, PersyPCP, and ShellForce), has been systematically…
Phishing remains one of the most effective methods for stealing credentials and breaching enterprise environments. Despite advanced email and browser protections, attackers now leverage AI, and automation to outpace traditional defenses. The Verizon 2024 Data Breach Investigations Report found…