F5 Security Incident: BIG‑IP Source Code Theft Spurs Urgent Actions

On October 15, application security vendor F5, Inc. disclosed that a highly sophisticated nation-state threat actor maintained long-term, persistent access to certain F5 systems. The attackers exfiltrated portions of BIG-IP¹ source code, internal documentation on undisclosed vulnerabilities, and some customer configuration and implementation data.

Independent reviews confirm there is no evidence that the attackers tampered with F5's source code repositories, build and release pipelines, or software supply chain, and investigators (including Mandiant and CrowdStrike) found no indications that they accessed F5's customer databases, financial, support case management, or iHealth systems.