Aug 9, 2025
1 new incident, 0 with updates.
Started
- ClosedPatched
F5 breached by nation-state actor: BIG-IP source code and undisclosed bugs stolen
F5 disclosed that a sophisticated nation-state actor had long-term access to its BIG-IP development and engineering systems and stole parts of the BIG-IP source code, information on undisclosed vulnerabilities and some customer configuration data. CISA issued Emergency Directive 26-01 ordering agencies to inventory and patch F5 gear. Researchers linked it to China-nexus UNC5221 and BRICKSTORM.
F5 BIG-IP (vendor breach)Closed Oct 15, 2025
