Critical bug in BIG-IP F5 Patched

Critical bug in BIG-IP F5 Patched

F5 has disclosed a critical vulnerability in its BIG-IP product.The flaw is in the iControl REST component of BIG-IP. This vulnerability may allow an unauthenticated attacker with network access to…
Curious Gorge too Curious on Russia

Curious Gorge too Curious on Russia

Google Threat Analysis Group has reported that an APT group linked to China’s People’s Liberation Army Strategic Support Force (PLA SSF), tracked as Curious Gorge, is targeting Russian government agencies.…
Path Traversal flaw in OWASP ESPI

Path Traversal flaw in OWASP ESPI

The Open Web Application Security Project (OWASP) has fixed a critical vulnerability in its Enterprise Security API (ESAPI) whose exploitation could have allowed threat actors to run path traversal attacks.…