--- title: "F5 Exploit the Exact Opposite of Refreshing" id: "12573" type: "podcast" slug: "f5-exploit-the-exact-opposite-of-refreshing" published_at: "2022-05-19T10:00:00+00:00" modified_at: "2026-08-20T05:30:35+00:00" url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/f5-exploit-the-exact-opposite-of-refreshing/" markdown_url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/f5-exploit-the-exact-opposite-of-refreshing.md" taxonomy_shows: - "Last Week In AWS Podcast" --- About the Author Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure. [https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305](https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305) [https://overcast.fm/itunes1466344305/aws-morning-brief](https://overcast.fm/itunes1466344305/aws-morning-brief) [https://pca.st/AKs0](https://pca.st/AKs0) [https://podcastaddict.com/podcast/2382583](https://podcastaddict.com/podcast/2382583) [https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU](https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU) [https://feeds.transistor.fm/aws-morning-brief](https://feeds.transistor.fm/aws-morning-brief) ## Episode Summary Last week in security news: when simulations attack!, “Hacking the Cloud”, a community built encyclopedia, make sure to patch your F5 appliance, and more! ## Episode Show Notes & Transcript **Links:** - "Hacking the Cloud" is a [community-built encyclopedia](https://github.com/Hacking-the-Cloud/hackingthe.cloud) - [npm dependency confusion attack](https://snyk.io/blog/npm-dependency-confusion-attack-gxm-reference/) . - [Windows Event Logs](https://www.bleepingcomputer.com/news/security/hackers-are-now-hiding-malware-in-windows-event-logs/) - F5 appliance (software or hardware) [full remote code execution with privileged access](https://www.bleepingcomputer.com/news/security/hackers-exploiting-critical-f5-big-ip-bug-public-exploits-released/) - Wiz has a blog post up about [securing AWS Lambda function URLs](https://www.wiz.io/blog/securing-aws-lambda-function-urls/) - [Build a strong identity foundation that uses your existing on-premises Active Directory](https://aws.amazon.com/blogs/security/build-a-strong-identity-foundation-that-uses-your-existing-on-premises-active-directory/) - [How to use new Amazon GuardDuty EKS Protection findings](https://aws.amazon.com/blogs/security/how-to-use-new-amazon-guardduty-eks-protection-findings/) - [Poro](https://github.com/9rnt/poro) (an open source project) scans for publicly accessible assets in your AWS environment View Full Transcript Hide Full Transcript ## You might also like [More Podcast Episodes](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/) ### [The Cost of Prime Day](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) Last Week In AWS Podcast 10.12.2026 5 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) ### [Your Database Is a Data Lake Now, Apparently](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) Last Week In AWS Podcast 10.05.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) ### [The Week AWS Was Wrong, Not Broken](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/) Last Week In AWS Podcast 09.28.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/)