Malcolm Heath

Principal Cybersecurity Threat Researcher

Malcolm Heath is the Principal Threat Researcher with F5 Labs. His career has included incident response, program management, penetration testing, code auditing, vulnerability research, and exploit development at companies both very large and very small. Prior to joining F5 Labs, he was a Senior Security Engineer with the F5 SIRT.

Research by Malcolm Heath (82)

Unprompted: When AI Agents Expose Data Without an Attacker

Article | Oct 21, 2026

Unprompted: When AI Agents Expose Data Without an Attacker

Four new incidents, and CASI/ARS Score updates

8 min read

Capability Is Closing the Open-Closed Gap; Security Is Not

Article | Aug 12, 2026

Capability Is Closing the Open-Closed Gap; Security Is Not

A competitive open-weight model, Claude Fable, and Jade Puffer.

7 min read

Adversarial Tales

Article | Jul 14, 2026

Adversarial Tales

A competitive open-weight model, Claude Fable, and Jade Puffer

8 min read

Topic Bridge

Article | Jun 3, 2026

Topic Bridge

CASI leaderboard shifts, and two incidents where AI was handed the keys.

11 min read

The Small Model Cliff

Article | May 27, 2026

The Small Model Cliff

CASI Leaderboard, Bias Jailbreak, and Three Coordinated Supply Chain Incidents

7 min read

CASI Leaderboard Shifts: Developer Role Attack, and Three Concerning Incidents

Article | Apr 9, 2026

CASI Leaderboard Shifts: Developer Role Attack, and Three Concerning Incidents

AI Security Insights – April 2026

9 min read

Looking at the SmarterMail API Vulnerability CVE-2026-24423

Article | Mar 12, 2026

Looking at the SmarterMail API Vulnerability CVE-2026-24423

Sensor Intel Series: February 2026 CVE Trends

9 min read

2026 Cybersecurity Predictions

Article | Dec 15, 2025

2026 Cybersecurity Predictions

Whatever you think will happen… will happen faster and with more acronyms than ever before.

13 min read

Tracking RondoDox: Malware Exploiting Many IoT Vulnerabilities

Article | Nov 24, 2025

Tracking RondoDox: Malware Exploiting Many IoT Vulnerabilities

Over a dozen exploits were used to target IoT devices.

15 min read

Analysis of a Large-Scale DDoS Attack Against a Payment Processing Platform

Article | Nov 19, 2025

Analysis of a Large-Scale DDoS Attack Against a Payment Processing Platform

The two-wave attack reached a peak of 1.8 Tbps.

4 min read

Results 1-10 of 82

Stay up to date with F5 Labs

Get the latest threat intelligence and research delivered to your inbox.