/
data_types_exposed:api_keys × latest_source_host:f5.com × limpar

Resultados

2 casos · pág. 1/1

f5.com · exploit público medium

Scanner from HOSTGLOBAL.PLUS (UK) probes 130 URLs for exposed .env files using 12,000+ rotating User-Agents; August 2025 CVE trends

F5 Labs, with Efflux sensor telemetry, profiled a persistent information-disclosure scanner operating from 78.153.140.203 in a netblock of AS202306 (HOSTGLOBAL.PLUS LTD), a UK ISP. The IP was first seen on 10 January 2025, vanished on 10 April, and returned on 11 July 2025. It scans 130 unique URLs: 80.23% are variations of /.env, 11.45% …

CVE-2017-9841 CVE-2023-1389 CVE-2019-9082
f5.com · high

F5 Labs CASI Leaderboard: Sugar-Coated Poison LLM attack and AI tooling flaws in Copilot, OpenClaw (CVE-2026-25253) and Claude Code (CVE-2026-21852)

F5 Labs published its March 2026 CASI Leaderboard update, which is now dominated by OpenAI and Anthropic. Z.ai's GLM-5 performs well on price and capability but has a weak security posture (CASI 37.56 vs 96.61 for Claude Opus 4.6 and 92.58 for GPT-5.2). The report also spotlights Sugar-Coated Poison (SCP), a multi-turn technique that grad…

CVE-2026-25253 CVE-2026-21852 technology software development