Info Security Magazine
3 months, 2 weeks ago
NCSC Urges Immediate Patching of F5 BIG-IP Bug
The National Cyber Security Centre wants UK firms to patch CVE-2025-53521
Security news aggregator
Latest coverage for F5
Stay updated on F5 security insights: Explore the latest in application delivery controls, threat intelligence, and cyber defense with F5 tag news.
11
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
F5 provides application-delivery technology, best known in security operations for BIG-IP appliances and software that load-balance traffic, terminate TLS, route requests, and can enforce web-application firewall, access-control, and denial-of-service protections. F5’s NGINX products are also used as reverse proxies and web servers. These components sit in front of applications, mediating internet traffic and trust boundaries.
Their privileged position makes exposed management interfaces, insecure configurations, leaked certificates or keys, and unpatched vulnerabilities especially significant: compromise can enable traffic interception, authentication bypass, request manipulation, or access to protected applications, depending on deployment. Security teams should inventory BIG-IP and NGINX instances and versions, restrict management planes, apply vendor fixes, review iRules, WAF, and access policies, and monitor administrative and anomalous proxy activity. During incidents, preserve configuration and traffic logs and assess whether TLS credentials or backend routes were exposed.
Volume over time
Weekly headline count for the current query.
Showing 11 most recent headlines
Filtered view
Dark Reading
3 months, 2 weeks ago
F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
CVE-2025-53521 was initially disclosed in October as a high-severity denial-of-service (DoS) flaw, but new information has revealed the bug is actually much more dangerous.
Dark Reading
3 months, 2 weeks ago
F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
CVE-2025-53521 was initially disclosed in October as a high-severity denial-of-service (DoS) flaw, but new information has revealed the bug is actually much more dangerous.
The Hacker News
3 months, 2 weeks ago
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation
Bleeping Computer
2 years, 8 months ago
F5 fixes BIG-IP auth bypass allowing remote code execution attacks
A critical vulnerability in the F5 BIG-IP configuration utility, tracked as CVE-2023-46747, allows an attacker with remote access to the configuration utility to perform unauthenticated remote code execution. [...]
Bleeping Computer
4 years, 2 months ago
CISA shares guidance to block ongoing F5 BIG-IP attacks
In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...]
Bleeping Computer
4 years, 2 months ago
CISA tells federal agencies to fix actively exploited F5 BIG-IP bug
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. [...]
Dark Reading
4 years, 2 months ago
How to Check if Your F5 BIG-IP Device Is Vulnerable
This Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.
Bleeping Computer
4 years, 2 months ago
Hackers exploiting critical F5 BIG-IP bug, public exploits released
Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]
Bleeping Computer
4 years, 2 months ago
Hackers exploiting critical F5 BIG-IP flaw to drop backdoors
Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]
Bleeping Computer
4 years, 2 months ago
Exploits created for critical F5 BIG-IP flaw, install patch immediately
Security researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability. [...]