F5 Security Incident

F5 discovered in/around August 2025 that a likely nation‑state actor maintained persistent access to internal systems and exfiltrated source code and technical documentation for BIG‑IP, F5OS, BIG‑IQ and other offerings; F5 has contained the intrusion, engaged forensic partners, released patches and mitigations, and currently reports no confirmed customer exploitation, but warns that stolen code and design details raise the risk of future zero‑day exploits. Recommended mitigations include isolating management interfaces, applying patches, rotating credentials and certificates, enabling centralized logging/event streaming to SIEM, conducting forensic hunts, and partnering with CrowdStrike for enhanced EDR and threat hunting.