Story perspectives

China-backed Hackers Breach F5, Expose Major Cyber Risks

10/17/2025

Summary

Story summary

State-backed hackers, likely from China, breached F5, Inc., maintained access for 12 months, and exfiltrated source code and BIG-IP data.
The breach risks federal networks and users of F5 technology, prompting the Cybersecurity and Infrastructure Security Agency (CISA) to issue an emergency directive for immediate updates.
F5 has engaged cybersecurity firms to investigate and issued patches for over 30 vulnerabilities.
The incident highlights the growing supply chain threat in cybersecurity.

History

Historical Context

The SolarWinds cyberattack in December 2020, attributed to Russian hackers, compromised over 18,000 organizations, including U.S. government agencies, revealing critical cybersecurity flaws. Following this, the March 2021 Microsoft Exchange breach, linked to Chinese state-sponsored hackers, exploited similar vulnerabilities, affecting an estimated 250,000 servers. These incidents underscore the urgent need for improved cybersecurity collaboration between government and private sectors.

1 of 2

Story summary

State-backed hackers, likely from China, breached F5, Inc., maintained access for 12 months, and exfiltrated source code and BIG-IP data.
The breach risks federal networks and users of F5 technology, prompting the Cybersecurity and Infrastructure Security Agency (CISA) to issue an emergency directive for immediate updates.
F5 has engaged cybersecurity firms to investigate and issued patches for over 30 vulnerabilities.
The incident highlights the growing supply chain threat in cybersecurity.

1 / 2