F5 Labs
LightNews LightNews
banner
f5labs.bsky.social
F5 Labs
@f5labs.bsky.social
37 followers 14 following 130 posts
Data driven cyber security threat research from the appsec experts at @f5inc.bsky.social https://f5.com/labs
Posts Replies Media Videos
Pinned
f5labs.bsky.social
F5 Labs @f5labs.bsky.social · Jun 26
In our latest piece, David Warburton examines quantum computing, PQC standards, and PQC adoptions, providing insights into the current landscape of #PQC in our 2025 TLS Telemetry analysis.

⬇️ Unlock these insights: https://go.f5.net/m2jf016y

#F5Labs #TechInsights #DataSecurity
Visual with a white quantum icon and text that reads, "The State of Post-Quantum Cryptography (PQC)."
f5labs.bsky.social
Join #F5Labs Director, David Warburton, for the F5 User Groups in the Nordics, where the discussion will revolve around streamlining operations, enhancing scalability, and the latest in threat intel.

Register today: ➡️ go.f5.net/mat0wtuu
November 12, 2025 at 6:00 PM
f5labs.bsky.social
Let’s take a second to discuss the evolution of encryption methods. With quantum threats by ~2030, now's the time to adopt hybrid #PQC.

Dive into the team’s research. go.f5.net/shehdfco

#Cybersecurity #PostQuantum
November 10, 2025 at 6:00 PM
f5labs.bsky.social
As #AI usage scales, which of the following issues hits you the hardest? Is there another issue you’ve seen? Let us know below!

🔸 Bot abuse inflating inference costs
🔸 Scraping of AI-generated content/data
🔸 L7 DDoS against inference/tool endpoints
🔸 Fragile rate limits ➡️ SLO/SLA breaches
Blue background with white text asking, "As AI usage scales, which issue hits you the hardest?" Below, the "f5 Labs Threat Research" logo appears. The background has a subtle dotted pattern.
October 9, 2025 at 5:00 PM
f5labs.bsky.social
As AI moves into production, risks evolve fast.

What’s your top concern when deploying #AI apps? Let us know below!

1️⃣ Prompt injection
2️⃣ Data abuse
3️⃣ Scaling & cost risks
4️⃣ Compliance/audit gaps

#CybersecurityAwarenessMonth #AISecurity #AppSec
What's your top concern when deploying AI apps?
October 7, 2025 at 5:00 PM
f5labs.bsky.social
Meet the CASI Leaderboard: a security-first ranking of #AI models by their Comprehensive AI Security Index (CASI).

See scores, methods, and how to compare risk across models.

🔗 go.f5.net/yjaoge44

#AppSec #AITrust #AISecurity #AICompliance #F5Labs
October 6, 2025 at 5:00 PM
f5labs.bsky.social
#CybersecurityAwarenessMonth is here!

We’ll be sharing research-driven insights to help reduce risk across web apps, #APIs, #bots, and preparing for #PQC.

Stay tuned for more!
Cybersecurity Awareness Month with F5 Labs. Text reads "Research-backed tips on Web Apps, APIs, Bots, PQC all month long." Graphic of cloud with the word "app" on a square and a shield with a checkmark in it.
October 1, 2025 at 2:00 PM
f5labs.bsky.social
This month, we focus on a scanner exploiting inadvertent disclosure vulnerabilities. This actor, originating from a UK-based ISP, has shown distinct patterns of behavior that we thought warranted scrutiny.

View analysis here: go.f5.net/ubxcndil

#ThreatIntelligence
F5 Labs image titled, "THREATS: Insights on How Attackers Exploit Accidental Exposure Flaws." It features a hooded figure using a laptop with a globe and arrows, alongside an orange warning sign.
September 29, 2025 at 5:00 PM
f5labs.bsky.social
From #CVE trends to malicious scanners, our latest SIS analysis explores:

1️⃣ Top targeted CVEs for the month
2️⃣ A scanner using 12k+ unique User-Agents
3️⃣ Steps to help protect your organization

See our analysis: go.f5.net/2818h4yr
#Cybersecuirty #ThreatIntelligence
A graph titled "THREATS Top CVEs: August 2025" from Labs THREAT RESEARCH, shows colored lines trending from August 2024 to August 2025. A purple line peaks in February/March 2025. Green peaks in September 2024.
September 26, 2025 at 6:00 PM
f5labs.bsky.social
Our recent analysis examined a specific malicious scanner (IP: 78.153.140.203) known for targeting exposed environment files (.env). This scanner displays a staggering 12k+ unique User-Agent strings, originating from a UK-based ISP.

View analysis here: go.f5.net/741mwjdd
#ThreatIntelligence
Threat analysis from F5 Labs shows the top 5 URLs targeted by IP 78.153.140.203. URLs ending in /.env are highly targeted, with the base /.env having nearly 1800 counts of unique URLs.
September 25, 2025 at 5:00 PM
f5labs.bsky.social
Banks hold sensitive data, such as transactions and credit card information. With quantum on the horizon, adopting #PQC is urgent. Without it, breaches could hit by 2030.

Benchmark readiness & plan your transition with our PQC
report: go.f5.net/0pffk41s

#QuantumRisk #DataProtection
September 24, 2025 at 5:00 PM
f5labs.bsky.social
Check out some highlights from our latest monthly SIS overview as we uncover the latest CVE trends!

🔗 go.f5.net/e3p0jv7g

#Cybersecurity #ThreatIntelligence #MalwareProtection
September 19, 2025 at 6:00 PM
f5labs.bsky.social
Quantum computing is reshaping the crypto roadmap. #NIST has finalized its first #PQC standards with clear roles for each algorithm family.

View them below. ⬇️

Learn more about PQC standards
➡️ go.f5.net/ve0f60cg

#Cybersecurity #QuantumSecurity #AppSec #Cryptography
FIPS203 defines encryption standard, keeping data private during transmission. The algorithm, CRYSTALS-Kyber, is now ML-KEM. "Swipe for more >". F5 Labs Threat Research logo in the upper-right corner. FIPS 204 defines the standard for digital signatures, which provide the ability to detect tampering. It is based on CRYSTALS-Dilithium algorithm and has been renamed ML-DSA. Swipe for more. FIPS 205 is an additional standard for digital signatures that uses a different class of algorithm than ML-DSA. Originally SPHINCS+, it's now standardized as SLH-DSA. Find out more on PQC standards via link in comments.
September 18, 2025 at 5:00 PM
f5labs.bsky.social
We published an article on #SparkRAT highlighting its architecture and potential vulnerabilities. We also have some #YARA rules to help identify SparkRAT in your environments.

Check out the article here: go.f5.net/o3k1rbep

Check out the YARA rules here: go.f5.net/v7bc0ake
September 17, 2025 at 5:00 PM
f5labs.bsky.social
As #QDay draws closer than expected. Is your data secure?

Join David Warburton, Director at #F5Labs, at this year’s IDC Security Summit in Sweden as he explores “Q-Day and the Quantum Deadline: Are We Ready?”

Get the full details: go.f5.net/aaz6088r

#IDCSecuritySummit #PQC
September 11, 2025 at 6:00 PM
f5labs.bsky.social
Did you know that 24% of the entries in CISA’s Known Exploited Vulnerabilities (KEV) list are RCE vulnerabilities?

No surprise that of the top 10 #CVEs we track, CVE-2017-9841, a PHPUnit eval-stdin.php RCE came in top.

Check out our analysis. go.f5.net/27nmlgj6
#MalwareProtection
Senor Intel Series: CVE-2017-9841 saw a 36% increase in scanning traffic in July, vs. June 2025. Donut chart illustrates PHPUNIT EVAL-STDIN.PHP in blue, gray fill. F5 Labs logo in upper right.
September 5, 2025 at 6:00 PM
f5labs.bsky.social
Finance, healthcare, & government: the sectors with the most to lose are among the slowest to adopt #PQC. So, what can your organization do?

✅ Establish a crypto bill of materials.
✅ Enable hybrid KEM or transition to TLS 1.3.

Find more helpful tips: go.f5.net/dgwc3hb1

#QuantumReadiness
September 4, 2025 at 5:00 PM
f5labs.bsky.social
TLS 1.3 is strong today, but tomorrow’s #quantumattacks could break it. That’s why it’s vital to understand hybrid post-quantum TLS handshakes.

Stay ahead of the curve with our #PQC report.

🔗 go.f5.net/toh1o17n
September 2, 2025 at 5:00 PM
f5labs.bsky.social
Looking into last month’s top scanned #CVEs, we saw a striking commonality across vulnerabilities: nearly all rely on HTTP-based vectors and culminate in command injection.

See what other trends the team uncovered: go.f5.net/fof1d9ew

#Cybersecurity #MalwareProtection
Senior Intel Series: Heading the Prevalence of Web-Based RCE Vulnerabilities. HTTP Vectors Lead the Latest CVE Scans. It shows a blue cloud with an arrow and a red shield with a checkmark.
August 31, 2025 at 5:00 PM
f5labs.bsky.social
Validation matters. So, we tested our #SparkRAT YARA rules against 4 years of Malware Bazaar samples (2020-02 to 2024-04) with zero positives.

Check out our #YARA rules on #Github: go.f5.net/pishckzt
SparkRAT. YARA Rules for Detecting the SparkRAT Client. A grey gear graphic on the right, with blue cloud design including a white rat with a lightning bolt.
August 29, 2025 at 6:00 PM
f5labs.bsky.social
In our latest SIS analysis, we dive into:

1️⃣ Top targeted CVEs for the month
2️⃣ Long-term CVE trends, and
3️⃣ Deep dive into web-based RCE vulnerabilities

Find out what the team uncovered: go.f5.net/mn5bmol8

#Cybersecurity #MalwareProtection #Threats
Graph titled "THREATS Top CVEs: July 2025," from F5 Labs, shows fluctuations of threats from July to July. One threat surges dramatically from Jan to Apr, dwarfing others, while several other threats remain consistently low.
August 28, 2025 at 5:00 PM
f5labs.bsky.social
Quantum is coming!

Only ~3% of banking sites support #PQC, far too low for sensitive data. Legacy encryption will crack under quantum, putting assets at risk.

See where you stand and how to start the PQC transition: go.f5.net/zwkq3got

#QuantumRisk #DataProtection
August 27, 2025 at 5:00 PM
f5labs.bsky.social
Traditional defenses like #CAPTCHAs are no longer enough!

Check out David Warburton’s op-ed in #Tahawultech as he lists key insights into combating advanced bot attacks effectively.

#BotDefense #Cyberthreats
F5 Labs post with text: "In today's digital landscape, where applications and APIs are the lifeblood of businesses, a silent threat lurks: sophisticated bot adversaries." It also features David Warburton, Director of F5 Labs.
August 26, 2025 at 5:00 PM
f5labs.bsky.social
Find out how the #F5Labs team examines the growing sophistication of bot adversaries & how they exploit application vulnerabilities without triggering traditional alarms.

🔗 ➡️ go.f5.net/l6nk6bsj

#CISOs #Cybersecurity
Black background with a blue globe graphic surrounded by blue and orange dots and orange robot icons. Text states: 'Bots are responsible for over 50% of website & API traffic.' F5 Labs logo in corner.
August 25, 2025 at 8:00 PM
f5labs.bsky.social
As software engineers & security architects, staying ahead of the curve in encryption protocols is critical for safeguarding sensitive data.

⬇️ Check out 3 reasons why you should care about #TLS 1.3.

#Cybersecurity #Cryptography #DataProtection
August 25, 2025 at 6:00 PM
f5labs.bsky.social
The impending arrival of #QDay is closer than ever!

What does this mean?

Find out as the #F5labs team evaluates the state of #PQC and steps you can take to make sure your website and data are safe!

www.f5.com/labs/article...
A graphic with the text "ENCRYPTION Preparing for Q-Day: What You Need to Know" along with "Explore our evaluation of PQC & learn essential steps to protect your data.", with the F5 labs logo.
August 22, 2025 at 7:00 PM