{"uuid": "84983327-02fe-40a2-bed4-3b98db71a755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53521", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muzviaifnf2t", "content": "\ud83e\udd16 'PoisonedRefresh': Linux rootkit on F5 BIG-IP APM via CVE-2025-53521 (critical RCE). Hooks loader internals, injects a fileless PHP webshell in RAM, survives BIG-IP upgrades.\nhttps://www.bleepingcomputer.com/news/security/hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit/", "creation_timestamp": "2026-09-08T20:48:46.921017Z"}