Share story
Security

CISA Flags Actively Exploited F5 BIG-IP Vulnerability With 9.3 CVSS Score Allowing Remote Code Execution

CISA Flags Actively Exploited F5 BIG-IP Vulnerability With 9.3 CVSS Score Allowing Remote Code Execution Image: Primary
CISA has added CVE-2025-53521, a critical flaw in F5 BIG-IP Access Policy Manager, to its Known Exploited Vulnerabilities catalog following evidence of active exploitation. The vulnerability carries a CVSS v4 score of 9.3 and allows remote code execution against affected systems. Any organization running F5 BIG-IP APM should treat this as an emergency patch priority. [Instagram] CISA has added a critical F5 BIG-IP Access Policy Manager flaw to its Known Exploited Vulnerabilities catalog. The vulnerability (CVE-2025-53521) carries a CVSS v4 score of 9.3 and allows remote code execution. Organizations running F5 BIG-IP APM should patch immediately. [LinkedIn] CISA has added CVE-2025-53521, a critical flaw in F5 BIG-IP Access Policy Manager, to its Known Exploited Vulnerabilities catalog following evidence of active exploitation. The vulnerability carries a CVSS v4 score of 9.3 and allows remote code execution against affected systems. Any organization running F5 BIG-IP APM should treat this as an emergency patch priority.
Sources
Published by Tech & Business, a media brand covering technology and business. This story was sourced from and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Hacker sentenced to eight years over tax-business phishing scheme

Chukwuemeka Victor Amachukwu was sentenced to eight years in prison for his role in spearphishing attacks against U.S. tax preparation businesses, authorities announced Monday. He pleaded guilty to conspiracy to commit computer in...

BleepingComputer
Policy AI
Policy AI

US orders civilian agencies to remove DeepSeek technology

The United States has ordered federal civilian agencies to stop buying DeepSeek products and services and remove them from government IT systems, according to the Department of Homeland Security. The restrictions also cover third-...

TechCrunch
AI Security
AI Security

GitLab opens beta dashboard for auditing coding agents

GitLab introduced a beta AI Governance Dashboard for Premium and Ultimate customers that brings its own coding agents and connected external agents into one audit view. It links agent activity to developers and projects, showing s...

GitLab
Security
Security

Go security releases block eight certificate authority keys

Go 1.27.3 and Go 1.26.10, released October 20, reject certificate chains passing through eight intermediate certificate authority keys, The Hacker News reports. The Go team recommends immediate upgrades, citing security concerns a...

The Hacker News
Security
Security

Chrome adds warnings for suspicious sites and copied scam commands

Google announced new Chrome Enhanced Protection defenses that check suspicious websites and warn about copied commands used in ClickFix scams, 9to5Google reported. Those scams persuade users to run commands that install malware, b...

9to5Google