172 casos · pág. 6/9
Trend Micro published research, conducted by Sapio Research among 2,250 IT and security decision-makers in 21 countries, on AI adoption in cybersecurity. 81% of businesses already use AI-driven tools in their security strategy, but 94% expect AI to negatively affect their cyber risk exposure within three to five years. Over half expect a …
Trend Micro published a report, Deepfake it 'til You Make It: A Comprehensive View of the New AI Criminal Toolset, describing how cybercriminals use inexpensive, off-the-shelf generative AI platforms to produce deepfake video, audio and images. Many of these platforms are marketed to content creators. Observed abuse includes CEO fraud wit…
Trend Micro published research (Unmasking Task Scams) on task scams, a fast-growing fraud model in which fake online job offers lure victims into repetitive, gamified digital tasks and then extract funds through escalating deposit demands. Operators impersonate legitimate staffing firms and digital marketing agencies and use SMS, WhatsApp…
Trend Micro published its Holidays, Scams, and AI survey of 6,536 consumers across the United States, United Kingdom, Australia, New Zealand, Singapore and Taiwan (2,100 in the U.S.), conducted 31 October to 10 November 2025. It shows a gap between scam-spotting confidence and actual exposure: 56% of Americans are very or extremely confid…
Trend Micro published its Security Predictions Report for 2026, titled The AI-fication of Cyberthreats, forecasting that AI and automation will let threat actors run entire campaigns autonomously, from reconnaissance to extortion. This is a forward-looking vendor assessment, not a report of a specific incident, and it names no actors, CVE…
TrendAI™ (Trend Micro) published a global study of 3,700 business and IT decision makers. It finds that organizations are deploying AI faster than they can govern or secure it. 67% of respondents have felt pressured to approve AI despite security concerns, and one in seven called those concerns "extreme" but overridden to keep pace with c…
F5 Labs analyzed exploitation of CVE-2026-24423, a CVSS 9.8 unauthenticated remote code execution flaw in SmarterTools SmarterMail (CWE-306). CISA added it to the KEV catalog on February 2, 2026 and notes it has been used in ransomware campaigns. Despite public write-ups, F5 sensors saw only one IP, 193.24.123.58 (ASN 200593, Russian ISP …
F5 Labs assesses the security risks and rewards of Chinese open-weight LLMs (Qwen, GLM, Kimi, MiMo, MiniMax, DeepSeek). It finds that strong offensive and defensive cyber capability does not translate into consistent resistance to attack. Cited examples include Kimi K3 finding 19 vulnerabilities in Redis and GLM 5.2 being self-hosted by H…
F5 Labs, using Efflux sensor telemetry, found that HTTP requests hitting its sensors rose from 5,125,557 in 2023 to 8,727,820 in 2024 (about 71%, or nearly 95% once normalized for sensor count). Most of the increase came from the BotPoke scanner, which looks for filenames associated with malware distribution sites. It was active mainly in…
F5 Labs honeynet telemetry shows overall hostile activity rising 55.5% month over month in June 2026, a return to the levels of the earlier-year spike. Highlighted is CVE-2024-44000, an unauthenticated account takeover flaw (CVSS 9.8, CWE-522) in the LiteSpeed Cache WordPress plugin, which rose by 1,128 to 2,603 attacks (8). Scanning is i…
F5 Labs, using attack telemetry from Efflux's global sensor network, analyzed the most exploited vulnerabilities in July 2025 and found that nearly all top-scanned CVEs are HTTP-based RCE or command injection flaws in web interfaces. CVE-2017-9841 (PHPUnit) was the most exploited, followed by CVE-2023-1389 (TP-Link Archer AX21), CVE-2022-…
F5 Labs, using Efflux sensor telemetry, reports a campaign that began on 2025-06-08. One actor is exploiting TP-Link AX21 routers (CVE-2023-1389, command injection in the country query parameter) and Raisecom web interfaces (CVE-2024-7120) to deliver a new malware family named NoBooze1. Four source IPs and three stage-one hosts were rotat…
F5 Labs published a "canary exploit" generator for CVE-2025-30065, a CVSS 10.0 flaw in the Apache Parquet Java parquet-avro Maven module. The tool lets defenders test whether their environments are vulnerable and confirm that patches and configuration are effective. F5's analysis finds the flaw far less severe than the CVSS score and earl…
The F5 Labs 2026 State of PQC on the Web report scanned the top 1 million domains with TLS 1.3 handshakes. It found that 54% support post-quantum (hybrid) key exchange, but the figure is driven mainly by CDNs, especially Cloudflare and Fastly, which enable PQC by default. Excluding Cloudflare-hosted domains, adoption falls to 22%. Sectors…
F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …
F5 Labs, using Efflux sensor telemetry, reports that CVE-2023-1389, an RCE in TP-Link Archer AX21 routers, was the most scanned-for CVE in December 2024 for the fifth consecutive month, with traffic far above any other tracked CVE. Other heavily scanned flaws include CVE-2022-24847 (GeoServer), CVE-2022-22947 (Spring Cloud Gateway), CVE-2…
F5 Labs' January 2026 AI security roundup covers two attack developments: the Persona Bullying jailbreak and a critical LangChain serialization injection vulnerability (CVE-2025-68664) reachable through prompt injection. Persona Bullying applies human social-engineering tactics such as gaslighting, ridicule and social pressure to LLMs con…
F5 Labs' 2025 Advanced Persistent Bots Report analyzes more than 200 billion web and mobile API transactions from F5 Bot Defense customers between November 2023 and September 2024. It finds that 10.2% (21.22 billion) of requests were bots or automation. Of these, 4.8% were unwanted bots mitigated by F5, 3.5% were flagged automation and 2.…
F5 Labs analyzes CVE-2025-23061 and its predecessor CVE-2024-53900, a CVSS 9.0 flaw in the Mongoose MongoDB client library that allows remote code execution on Node.js API servers. The bug abuses the populate method, which accepts a $where clause containing arbitrary JavaScript. The initial fix for CVE-2024-53900 blocked only top-level $w…
CVE-2026-9082 is a critical (CVSS 9.8) pre-authentication SQL injection in the JSON:API module of Drupal Core. It was published on May 20, 2026 and added to the CISA KEV catalog the same month, with a remediation deadline of May 27. F5 sensors recorded 576 exploitation attempts from 9 source IPs between May 20 and May 31, 2026. The earlie…
