Nation-State Hackers Hit Cybersecurity Provider F5
Digest more
The intrusion affected F5’s BIG-IP product development environment and engineering knowledge management platforms.
In an emergency directive issued Wednesday, the agency said attackers can exploit flaws in F5 products and gain unauthorized access to embedded credentials and application programming interface keys.
More information has come to light on the cyberattack disclosed on Wednesday by security and application delivery solutions provider F5.
On Wednesday, U.S. government officials said federal networks are being targeted by an unidentified "nation-state cyber threat actor" that is trying to exploit vulnerabilities in products made by F5.
Officials warned that attackers could exploit the vulnerabilities to steal credentials, move laterally through networks, and potentially take full control of targeted systems.
F5 was recently targeted by state-sponsored threat actors who managed to steal sensitive information from the company’s systems.
Taiwan Semiconductor Manufacturing declines even as third-quarter profit beats analysts’ estimates, while HP Enterprise falls sharply after weaker-than-expected guidance.