1.167 casos · pág. 39/59
F5 Labs published its 2026 cybersecurity predictions and scored its 2025 forecasts at 6.5/8, by its own assessment. The 2025 review cites AI-powered botnets, attacks on AI model APIs, AI side-channel attacks on cryptography, APT use of hacktivist personas, and expanded Roskomnadzor powers to isolate or reroute Russian internet traffic fro…
F5 Labs, using attack telemetry from Efflux sensors, reports that CVE-2017-9841 (PHPUnit eval-stdin.php RCE) remained the most targeted vulnerability in May 2025 with over 54,000 instances. CVE-2020-8958 (Guangzhou ONU command injection RCE) shows near-exponential targeting growth for a third consecutive month. CVE-2024-3721 (TBK DVR OS c…
F5 Labs, with Efflux sensor telemetry, profiled a persistent information-disclosure scanner operating from 78.153.140.203 in a netblock of AS202306 (HOSTGLOBAL.PLUS LTD), a UK ISP. The IP was first seen on 10 January 2025, vanished on 10 April, and returned on 11 July 2025. It scans 130 unique URLs: 80.23% are variations of /.env, 11.45% …
F5 Labs reports a scanning campaign observed on its Honeynet in March 2026. It recorded 1,897 session-grouped attempts (2,821 raw events) tied to CVE-2018-14028, a WordPress 4.9.7 unrestricted file upload flaw, and the CVE entered the monthly top 10 after being absent in February. Instead of exploiting the upload flaw, the operator probes…
F5 Labs published its March 2026 CASI Leaderboard update, which is now dominated by OpenAI and Anthropic. Z.ai's GLM-5 performs well on price and capability but has a weak security posture (CASI 37.56 vs 96.61 for Claude Opus 4.6 and 92.58 for GPT-5.2). The report also spotlights Sugar-Coated Poison (SCP), a multi-turn technique that grad…
F5 Labs published research on SparkRAT, a freely available, Go-based open-source Remote Access Trojan with a C2 server and builds for Windows, Linux and macOS. Public reporting since January 2023 shows use by a widening set of actors: Chinese-speaking groups, Winnti (APT41), Patchwork, TAG-100, suspected UAC-0194 against Ukraine, and Cybe…
F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…
F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…
Proofpoint disclosed an active campaign, tracked as UNKCondorFiltration, that used the TeamFiltration offensive framework against more than 5,700 accounts across 28 Microsoft 365 tenants. It focused mainly on Chilean retail and financial institutions and originated from 1,487 unique AWS EC2 IP addresses. Seven accounts were compromised, a…
At Proofpoint Protect 2026, company executives and researchers argued that AI is raising the speed and scale of attacks but not rewriting the attacker playbook. They said security for AI agents must move beyond identity and behavior checks to evaluating intent. Proofpoint presented its Agentic Data & AI Security System, Semantic Business …
A Forbes Technology Council expert panel, republished by Proofpoint, lists the emerging AI security risks that business leaders should address as AI adoption grows. The main themes are sensitive data leakage through prompts, shadow AI and third-party model integrations (OpenAI, Anthropic), and AI agents with excessive permissions that act…
A Ponemon Institute and Proofpoint survey of 705 IT and security practitioners at U.S. healthcare institutions (conducted May 2026) found that 97% of organizations suffered at least one cyberattack in the past 12 months, and 74% of those reported disruption to patient care. The average number of attacks per organization rose to 51 from 43…
Proofpoint and the Ponemon Institute released their fifth annual Cyber Insecurity in Healthcare report, based on a survey of 705 IT and security practitioners at U.S. healthcare organizations. 97% of respondents experienced at least one cyberattack in the past 12 months, and 74% of those reported disruption to patient care. The average nu…
Proofpoint, a Thoma Bravo portfolio company, announced on October 15, 2026 a definitive agreement to acquire Varonis Systems, Inc. (Nasdaq: VRNS) in an all-cash transaction valued at approximately $6.3 billion, or $49.75 per share. The price is a 52% premium to Varonis' June 22, 2026 close and a 17% premium to its September 1, 2026 close.…
Proofpoint has announced an agreement to acquire Varonis in a deal valued at $6.3 billion, according to the headline of the company's newsroom item. This is a corporate consolidation event in the cybersecurity industry, not a security incident or threat. The available article text gives no deal terms, closing timeline, regulatory conditio…
Proofpoint, owned by private equity firm Thoma Bravo, has agreed to acquire data security vendor Varonis Systems in an all-cash transaction valued at $6.3 billion. The source provides only the headline, so deal terms, closing timeline, regulatory approvals and product integration plans are not stated. This is industry consolidation news w…
Proofpoint CEO Sumit Dhawan appeared on CNBC's 'Squawk on the Street' to discuss the $6.3 billion acquisition of Varonis, which the article describes as an AI cybersecurity firm. The interview also covered AI safety issues. The article is a short interview teaser and gives no deal terms beyond the price, no closing timeline and no technic…
FortiGuard Labs describes an intrusion in which a compromised Jenkins EC2 build host, tied to Shai Hulud persistence, was used to steal instance role credentials via IMDS and pivot into the victim's AWS environment. The actor used the credentials from external IPs, created an admin IAM user named cloudops-monitor, opened network paths to …
Proofpoint CEO Sumit Dhawan told CRN in an interview that the planned $6.3 billion acquisition of publicly traded data security vendor Varonis, announced the previous day, is meant to combine complementary technologies to protect data accessed by AI agents. The deal is pitched as giving channel partners a broader data security platform an…
FortiGuard Labs reports an ongoing Ousaban campaign targeting the Iberian Peninsula. The actor keeps refining its delivery chain and uses geofencing and environmental checks to restrict access to the malware to the intended victims. Ousaban resolves its C2 IP through daily-changing domains and runs a traditional C2 setup as a decoy. Its l…
