Threat actorcritical
CISA Warns of Threat Actors Exploiting F5 BIG
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-27924 | Unauthenticated Memcache Command Injection in Synacor Zimbra Collaboration Suite | 7.5 | 94% | KEVRansomware | KEV |
| CVE-2023-42793 | Authentication bypass in JetBrains TeamCity enables unauthenticated RCE | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
From the original article
3 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that it has observed threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager (LTM) module to conduct reconnaissance of target networks.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.