InfoSecBulletin Cybersecurity for mankind

F5 Networks has issued its Quarterly Security Notification, highlighting several vulnerabilities that may severely impact enterprise infrastructures. F5 rates these flaws as “Medium” severity, but the CVSS v4.0 framework scores the most critical issues at 8.2 (High), indicating serious risks for production environments using BIG-IP, NGINX, and similar components. High-Risk …

According to Palo Alto Networks, a state-backed hacking group compromised government and critical infrastructure systems worldwide. The security firm identifies the threat actor as TGR-STA-1030, and their recent activity is dubbed as the Shadow Campaign. Palo Alto Networks expressed high confidence that it’s a nation-state group operating out of Asia …

Sysdig Threat Research Team (TRT) observed an offensive cloud operation targeting an AWS environment in which the threat actor went from initial access to administrative privileges in less than 10 minutes. This incident was notable for its rapid execution and indications that the attacker used large language models (LLMs) to …