F5 discloses nation-state theft of BIG-IP source code
15 Oct 2025
Security vendor F5 says a nation-state actor had long-term access to its systems and stole BIG-IP source code and vulnerability information.
Insights that apply internationally, including most vulnerabilities, threats, and international standards.
Security vendor F5 says a nation-state actor had long-term access to its systems and stole BIG-IP source code and vulnerability information.
ISO and IEC publish the third edition of ISO/IEC 27018, aligned to ISO/IEC 27002:2022, for protecting PII in public clouds.
OpenAI releases GPT-5 to ChatGPT users, describing it as its most capable model and bringing reasoning to its default experience.
Attackers exploit a zero-day flaw in on-premises Microsoft SharePoint servers, known as ToolShell, with hundreds of organisations reported compromised.
The Global Cross-Border Privacy Rules Forum launches its Global CBPR and PRP certifications, a new mechanism for international data transfers.
The future-dated requirements in PCI DSS v4.0 become mandatory, including targeted risk analyses, wider MFA and payment page script controls.
Hackers steal around US$1.5bn in Ethereum from Dubai-based exchange Bybit, a theft the FBI attributes to North Korea.
Chinese start-up DeepSeek’s R1 reasoning model tops app download charts and triggers a record one-day fall in Nvidia’s market value.
The Nobel prizes in physics and chemistry go to work underpinning modern AI, including neural networks and AlphaFold’s protein structure prediction.
The Wall Street Journal reports that the Salt Typhoon group had penetrated major US telecoms firms, including systems used for court-authorised wiretaps.
NIST publishes FIPS 203, 204 and 205, the first finalised post-quantum cryptography standards.
NIST AI 600-1 identifies risks unique to or exacerbated by generative AI and suggests actions to manage them.