U.S. cybersecurity firm F5 has confirmed that it suffered a cybersecurity incident involving a “highly sophisticated nation-state threat actor” that maintained long-term access to certain company systems. The intrusion, detected in August 2025, and revealed this week, affected F5’s BIG-IP product development environment and engineering knowledge management platforms. The company said the threat actor “downloaded files” from these systems but emphasized that containment efforts have been successful, with “no new unauthorized activity” detected since mitigation steps began.F5 stated it has “rotated credentials and strengthened access controls,” improved patch management automation, and enhanced network security architecture. It also hardened its software development environment to increase monitoring and control. Are ssytems becoming too vulnerable ?

