F5 discloses breach tied to nation-state threat actor

F5 reported a highly sophisticated, nation-state–attributed intrusion discovered in August that gave attackers prolonged access to parts of its infrastructure; exfiltrated files included portions of BIG‑IP source code, vulnerability remediation details, and some customer configuration information. The company and hired responders found no signs of source‑code tampering or active exploitation, have applied containment and mitigations, released updates and guidance for customers, and continue to work with law enforcement and third‑party firms to assess impact.