Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell directly into memory, avoiding the need to write malicious code to disk [1].

Sources

1. bleepingcomputer.com · Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit Sep 8, 2026
2. bleepingcomputer.com · 220 million traveler records exposed in Vietnam-linked APIS leak Sep 8, 2026
3. bleepingcomputer.com · Magento StyleSmuggler zero-day exploited to deploy Linux backdoor Sep 7, 2026

This is the neutral brief the press writes once, for everyone, before each reader’s paper adds its own so-what. It links out; it does not republish. 3 articles clustered.

Print your own paper