live feed
The Hacker News
9 Sept 2026

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any of

// analyst note

This briefing summarises reporting from The Hacker News. 90@! Ltd curates and rewrites third-party cybersecurity reporting for UK defenders. For the full technical write-up, read the original source.

Curated by 90@! Ltd from The Hacker News. Read the original for full technical detail.

Read original at The Hacker News

// 90@! Ltd

Need help acting on this?

90@! Ltd is a UK applications and cybersecurity consultancy. We help teams triage, remediate, and harden against emerging threats like this one.

Start an engagement