https://pwn.watch/t/brickstorm Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Wed, 15 Oct 2025 00:00:00 GMT https://pwn.watch/i/f5-nation-state-breach-big-ip-source-code-2025 https://pwn.watch/i/f5-nation-state-breach-big-ip-source-code-2025 Wed, 15 Oct 2025 00:00:00 GMT critical <p>F5 disclosed that a sophisticated nation-state actor had long-term access to its BIG-IP development and engineering systems and stole parts of the BIG-IP source code, information on undisclosed vulnerabilities and some customer configuration data. CISA issued Emergency Directive 26-01 ordering agencies to inventory and patch F5 gear. Researchers linked it to China-nexus UNC5221 and BRICKSTORM.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> F5 October 2025 Quarterly Security Notification releases</p> <p><strong>Latest updates:</strong></p><ul><li>2025-10-15: F5 discloses the breach (SEC 8-K) and ships patches (<a href="https://my.f5.com/manage/s/article/K000154696">source</a>)</li><li>2025-10-15: CISA issues Emergency Directive 26-01 for F5 devices (<a href="https://www.cisa.gov/news-events/directives/ed-26-01-mitigate-vulnerabilities-f5-devices">source</a>)</li><li>2025-08-09: F5 learns of the intrusion (<a href="https://www.sec.gov/Archives/edgar/data/1048695/000104869525000149/ffiv-20251015.htm">source</a>)</li></ul>