F5 Networks enquête tous azimuts après une cyberattaque sophistiquée
https://www.lemondeinformatique.fr/actualites/lire-f5-networks-enquete-tous-azimuts-apres-une-cyberattaque-sophistiquee-98206.html
#Infosec #Security #Cybersecurity #CeptBiro #F5Networks #CyberattaqueSophistiquee
@beyondmachines1 before you patch your F5 stuff, extract all forensic information you can!
For any F5 system you have, contact your vendor and press them to give you direct access and ways to gather evidence for yourself.
Also collect any and all logs and other forensic evidence from devices directly reachable from any F5 stuff you have.
These are hard earned lessons, people.
Slow down before you speed up, or your containment and eradication phases will be insufficient or even useless.
The company, which provides cybersecurity defenses to most of the Fortune 500, said the DOJ allowed it to delay notifying the public on national security grounds.
https://my.f5.com/manage/s/article/K000154696
F5 security incident.
„..exfiltrated files from our BIG-IP product development env[..]. These files contained some of our BIG-IP source code & info about undisclosed vulns we were working on in BIG-IP.“
„we strongly advise updating your BIG-IP asap“
F5 Networks' routine security check spiraled into a high-stakes drama when nation-state hackers infiltrated their critical systems and snagged secret source code. How safe is our digital infrastructure now?
#f5networks
#advancedpersistentthreat
#incidentresponse
#cybersecuritybreach
#supplychainsecurity
Rene Robichaud
⠠⠵ avuko
Mind Lude
fthy
The DefendOps Diaries
heise online (inoffiziell)
ITSEC News