Threat Source newsletter (March 18, 2021)
Summary: Cisco Talos reported that F5 disclosed four critical vulnerabilities, seven high-severity bugs and 10 medium-severity issues in its BIG-IP and BIG-IQ application delivery products, which F5 urged users to patch immediately. Talos also reported new exploitation of the Microsoft Exchange Server zero-days by actors beyond the initial "Hafnium" group, including groups using infrastructure previously tied to cryptocurrency mining and web shells created or accessed with notepad.exe or notepad++.exe, with financial services disproportionately affected.
What you should know: F5 said a vulnerable BIG-IP appliance could be exploited to break into the broader enterprise network, and the Exchange exploitation has already spread from one actor to multiple groups hitting financial services, health care, education and state and local governments.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026