Breach at US-Based Cybersecurity Provider F5 Blamed on China, Bloomberg News Reports
Hackers accessed BIG-IP source code and undisclosed vulnerabilities, with investigations confirming no evidence of exploitation or software supply chain compromise, F5 said.
- On August 9, 2025, U.S. cybersecurity company F5 disclosed nation-state hackers breached its systems and stole undisclosed BIG-IP source code and vulnerability information.
- Attackers maintained long-term access to the BIG-IP product development environment and engineering knowledge management platform, exfiltrating files including configuration data for a small percentage of customers.
- The company serves 23,000 customers in 170 countries, including 48 of the Fortune 50, and independent reviews by leading cybersecurity research firms validated BIG-IP releases.
- The Cybersecurity and Infrastructure Security Agency issued an emergency directive requiring federal civilian executive branch agencies to apply F5 patches by Oct. 22 and report affected products by Oct. 29.
- The U.S. Department of Justice determined on September 12, 2025 that a disclosure delay was warranted, and F5 is reviewing stolen files, contacting affected customers, and urging updates soon.
24 Articles
24 Articles
Breach at US-based cybersecurity provider F5 blamed on China, Bloomberg News reports
A breach at U.S.-based cybersecurity company F5 has been blamed on state-backed hackers from China, Bloomberg News reported on Wednesday, citing people familiar with the matter.Read MoreThe post Breach at US-based cybersecurity provider F5 blamed on China, Bloomberg News reports first appeared on The Who Dat Daily.
Thousands of customers imperiled after nation-state ransacks F5’s network
Thousands of networks—many of them operated by the US government and Fortune 500 companies—face an “imminent threat” of being breached by a nation-state hacking group following the breach of a major maker of software, the federal government warned Wednesday. F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a “sophisticated” threat group working for an undisclosed nation-state government had surreptitio…
CISA directs agencies to address ‘significant cyber threat’
The Cybersecurity and Infrastructure Security Agency is directing agencies to address potential security vulnerabilities in widely used software management devices after the source code and customer data were recently accessed by nation-state hackers. In an emergency directive released today, CISA told agencies to mitigate vulnerabilities in devices made by technology company F5. The cyber agency said it identified a “significant cyber threat ta…
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium