F5 Labs threat research
In-depth threat research, global vulnerability analyses, and actionable security intelligence uncovered by F5 Labs researchers.
Featured Blog Posts
Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)
Sensor Intel Series: September 2026 CVE Trends
By Adam Metcalfe-Pearce
Capability Is Closing the Open-Closed Gap; Security Is Not
A competitive open-weight model, Claude Fable, and Jade Puffer.
By Lee Ennis
Chinese Open-weight AI Models: Cybersecurity Risks and Rewards
Chinese models show variation from month to month, highlighting the uncertain and unstable nature of their security posture
By F5 Labs StaffThreat research Blog posts
(355)
Analysis of a Large-Scale DDoS Attack Against a Payment Processing Platform | F5 Labs
The two-wave attack reached a peak of 1.8 Tbps. ... Several phases of the attack unfolded in high-intensity waves, employing multiple DDoS techniques and achieving traffic volumes previously unseen...
Weekly Threat Bulletin – July 1st, 2026 | F5 Labs
These are the top threats you should know about this week. ... Threat intelligence firm Defused observed automated attacks originating from Tor, which leverage the WebDialer SSRF to install a rogue...
Weekly Threat Bulletin – June 24th, 2026 | F5 Labs
These are the top threats you should know about this week. ... Apple has released Beats Firmware Update 1B211 to address CVE-2025-20701, a high-severity eavesdropping vulnerability (rated 8.8 out o...
BGP, DNS, and the Fragility of our Critical Systems | F5 Labs
DNS is better known, but some recent high-profile outages are a reminder that Border Gateway Protocol (BGP) failures can take sites down too. ... Update, June 22, 2022: In light of the root cause a...
Tips and Tricks for Rolling Out Multi-Factor Authentication | F5 Labs
Evaluate your needs, prioritize apps, implement with users in mind, but most of all, stop waiting and just get started. ... The security industry is quick to point out the ineffectiveness of passwo...
Canary Exploit Tool for CVE-2025-30065 Apache Parquet Avro Vulnerability | F5 Labs
Investigating a schema parsing concern in the parquet-avro module of Apache Parquet Java. ... Want a quick redux of the canary exploit tool? ... On April 1st, 2025, CVE-2025-30065 was published, al...
Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in December 2019 | F5 Labs
Threat campaign activity in December 2019 doubled from the previous month. ... Security researchers at F5 Networks constantly monitor web traffic at various locations all over the world. ... This a...
Can Bots Manipulate Data and Change Facts to Fiction? | F5 Labs
Data manipulation is a real threat to data-driven approaches at enterprises. ... We tested one of our own assets to see the possibilities. ... “Data driven” is the new catchphrase that is takin...
Sensor Intel Series: Top CVEs in August 2022 | F5 Labs
Learn what attackers scanned for last month so you can tune your defenses. ... This month’s installment in F5 Labs’ monthly Sensor Intel Series focuses on vulnerability targeting trends for the...
Cyberattacks Targeting South Africa, January through June 2021 | F5 Labs
F5 Labs was honored to host two Howard University undergraduate students, Malaya Moon and Akosua Wordie, as part of a Summer Security Practicum program. ... These two students assisted F5 Labs staf...
Web Injection Threats: The Cost of Community Engagement on Your Site | F5 Labs
Customer engagement drives web application design, but user-generated content brings inherent security challenges. ... 7/22/20167 min. read ... When it comes to OWASP Top 10 vulnerabilities and bes...
RSA in a “Pre-Post-Quantum” Computing World | F5 Labs
Quantum computing is coming. ... What should your strategy be today to deal with what’s on the horizon? ... We know that quantum computing is coming and that it will have significant impacts for ...
Cryptocurrency Hacks 2019 | F5 Labs
Attacks against exchanges, exit scams and nation-state threats mean that cryptocurrencies retain their Wild West character in 2019. ... Introduction ... Ten months ago we asked a rhetorical questio...
FluBot’s Authors Employ Creative and Sophisticated Techniques to Achieve Their Goals in Version 5.0 and Beyond | F5 Labs
A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect. ... In early 2020, a ...
How Credential Stuffing Bots Bypass Defenses | F5 Labs
How Credential Stuffing Bots Bypass Defenses ... Website logins are under constant assault, with attackers quickly modifying their bots to evade simplistic defenses. ... By Raymond Pompon ... In th...
What Happens to Encryption in a Post-Quantum Computing World? | F5 Labs
As the possibility of quantum computing draws nearer, changes to today’s TLS key exchange algorithms will be required. ... <Previous article in this seriesNext article in this series> ... While t...
The Hunt for IoT: The Networks Building Death Star-Sized Botnets | F5 Labs
Unknown block type "downloadButton", specify a component for it in the `components.types` prop ... So, who exactly is involved in the IoT hunt? ... Here are some key findings of this report: ... Ne...
Will Losses from Cryptocurrency Exchange Hacks Hit a Billion Dollars In 2018? | F5 Labs
Will Losses from Cryptocurrency Exchange Hacks Hit a Billion Dollars In 2018? ... Cryptocurrency exchanges and their supporting application systems are being attacked at an unprecedented level. ......