Cyber giant F5 Networks says government hackers had 'long-term' access to its systems, stole code and customer data | TechCrunch

"Cybersecurity firm F5 Networks says government-backed hackers had "long-term, persistent access" to its network, which allowed them to steal the company's source code and customer information. In a filing with the U.S. Securities and Exchange Commission on Wednesday, F5 said it now 'believes its containment actions have been successful,' after first discovering the hackers in its network on August 9."

"The Seattle, Washington-based company, which specializes in providing application security and cybersecurity defenses for large companies and governments, said the hackers had access to its BIG-IP product development environment and its knowledge management systems, which included source code and publicly undisclosed security vulnerabilities. F5 said it wasn't aware of any modifications to its software while in development, nor was it aware of any exploitation of the vulnerabilities."

F5 Networks discovered government-backed hackers had long-term access to its network beginning August 9 and believes containment actions have been successful. The intruders accessed the BIG-IP product development environment and knowledge management systems, obtaining source code and undisclosed security vulnerabilities. F5 reported no evidence of software modifications or exploitation of the vulnerabilities. The attackers also downloaded customer configuration and implementation files that could expose design weaknesses and enable attacks. F5 released BIG-IP updates to patch flaws and urged customers to apply them. The U.S. Department of Justice allowed a delayed public disclosure, and U.K. NCSC issued a warning.

Read at TechCrunch