F5

A threat actor compromised an end-of-life F5 BIG-IP edge appliance and pivoted to an internal Linux host via SSH. From there, they exploited an unpatched Atlassian Confluence server to gain code execution and used relay-style authentication attacks against Active Directory. The incident highlights risks from unpatched edge devices and SaaS applications enabling lateral...