2026-03-28: F5 BIG-IP vulnerability CVE-2025-53521 added to CISA KEV after active exploitation

Show Notes - 2026-03-28

Stories Covered

• March 28, 2026
• Today:
• F5 BIG-IP APM Remote Code Execution (CVE-2025-53521) [Critical Alerts]
• TeamPCP Supply Chain Attack Escalates: Telnyx PyPI Compromise, Vect Ransomware Partnership, and AstraZeneca Breach Claim [Ransomware & Extortion]
• Jackson County Sheriff's Office Crippled by Ransomware Attack [Ransomware & Extortion]
• Bearlyfy Pro-Ukrainian Group Evolves with GenieLocker Ransomware [Ransomware & Extortion]
• TeamPCP Wiper Campaign Targets Iran [Ransomware & Extortion]
• Russian Ransomware Operators Sentenced, RedLine Admin Extradited [Ransomware & Extortion]
• LeakBase Administrator "Chucky" Detained in Russia [Ransomware & Extortion]
• TeamPCP Telnyx Compromise Indicators [IOCs & Detection]
• F5 BIG-IP CVE-2025-53521 Exploitation Indicators [IOCs & Detection]
• Fake VS Code Security Alerts on GitHub Spread Malware to Developers [Business & Infrastructure Threats]
• Open VSX Pre-Publish Scanning Bypass (Open Sesame) [Business & Infrastructure Threats]
• European Commission Investigating Breach After Amazon Cloud Account Hack [Business & Infrastructure Threats]
• Microsoft Defender High-Value Asset Protection [Windows / AD Security]
• Microsoft Removes Trust for Non-WHCP Kernel Drivers [Windows / AD Security]
• TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign [General Security News]
• Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits [General Security News]
• AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion [General Security News]
• FAUX#ELEVATE Malware Targets French-Speaking Professionals via Phishing Résumés [General Security News]
• etcd Authorization Bypass Vulnerabilities [Vulnerability Disclosures]
• Microsoft Edge Chromium-Based Vulnerabilities [Vulnerability Disclosures]

CVEs Referenced

CVE-2025-53521, CVE-2026-32187, CVE-2026-33343, CVE-2026-33413, CVE-2026-4673, CVE-2026-4677, CVE-2026-4680

Indicators of Compromise

Domains: drnatashachinn[.]com, escofiringbijou[.]com, careerscrews[.]com, careerstaffer[.]com, careersworkflow[.]com, mail[.]ru.

IP Addresses: 17.5.1.3, 16.1.6.1, 15.1.10.8, 83.142.209.203

Read the full brief