Threat Source newsletter (May 19, 2022) — Why I'm missing the days of iPods and Lime Wire

Summary: Cisco Talos reported that attackers are still exploiting a critical vulnerability in F5's BIG-IP software, with SANS Institute researchers finding adversaries using it to try to wipe Linux systems, and CISA adding CVE-2022-1388 to its known vulnerabilities list with a May 30 patch deadline for federal agencies. The newsletter also noted U.S. officials saying they believe America will be first to harness quantum computing, a Treasury warning that North Koreans are posing as remote workers to apply at cryptocurrency companies and steal currency for their government, and continued warnings about potential Russian state-sponsored attacks.
What you should know: CVE-2022-1388 lets an attacker obtain root privileges on the Linux systems powering BIG-IP devices, and some are already using that access to delete files the operating system needs to function - with federal agencies given until May 30 to patch.

Read the original at Cisco Talos ↗

Topics: Malware
Mentions: CVE-2022-1388
Related: CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability Known Exploited Vulnerabilities · May 10, 2022
Threat Advisory: Critical F5 BIG-IP Vulnerability Cyber Risks ·
Threat Brief: CVE-2022-1388 Cyber Risks ·