'Significant' threat to US networks after hackers stole F5 source code, CISA warns

Cyber-security.

• CISA warns FCEB agencies to patch F5 products after a nation-state breach
• Attackers stole BIG-IP source code and vulnerability data, risking zero-day discovery and exploitation
• F5 released updates; no confirmed exploitation yet, but federal networks face imminent threat

The US Cybersecurity and Infrastructure Security Agency (CISA) is urging Federal Civilian Executive Branch (FCEB) agencies to catalog and patch F5 products in their tech stack, after hackers broke into the company and stole source code along with other sensitive information.