Tag: Cybersecurity and Infrastructure Security Agency

CybersecuritySecuritySoftware

Urgent Windows Security Update Required As Active Exploits Target SMB Vulnerability

Cybersecurity authorities are urging immediate action as attackers exploit a critical Windows vulnerability affecting Server, 10, and 11 systems. The privilege escalation flaw in SMB client protocol poses significant risks to federal agencies and businesses alike. Security analysts confirm patches have been available since June but many systems remain unprotected.

Critical Windows Vulnerability Under Active Exploitation

Organizations using Microsoft Windows are facing urgent cybersecurity pressures as America’s Cyber Defense Agency confirms active attacks against a high-severity privilege escalation vulnerability. According to reports from the Cybersecurity and Infrastructure Security Agency (CISA), the vulnerability designated as CVE-2025-33073 affects Windows Server, Windows 10, and Windows 11 systems and requires immediate patching.

by Aaron Blake
Cybersecurity

F5 Systems Breached by Nation-State Actor, Customer Data and Source Code Accessed

A nation-state affiliated threat actor gained persistent access to F5’s development environment, exfiltrating source code and customer configuration files. Federal agencies have been directed to take immediate emergency actions regarding F5 BIG-IP products following the security breach disclosure.

Security Breach at F5 Networks

A nation-state-affiliated threat actor gained unauthorized access to systems at F5, Inc., exfiltrating source code for its BIG-IP application delivery and security products along with files containing customer configuration or implementation information, according to regulatory filings and company statements. The Seattle-based security vendor disclosed Wednesday that the threat actor had “long-term, persistent access” to both the BIG-IP development environment and engineering knowledge management platform.

by Aaron Blake