Thousands of networks—many of them operated by the US government and Fortune 500 companies—face an “imminent threat” of being breached by a nation-state hacking group following the breach of a major maker of software, the federal government warned on Wednesday.
F5, a Seattle-based maker of networking software, disclosed the breach on Wednesday. F5 said a “sophisticated” threat group working for an undisclosed nation-state government had surreptitiously and persistently dwelled in its network over a “long term.” Security researchers who have responded to similar intrusions in the past took the language to mean the hackers were inside the F5 network for years.
Unprecedented
During that time, F5 said, the hackers took control of the network segment the company uses to create and distribute updates for BIG IP, a line of server appliances that F5 says is used by 48 of the world’s top 50 corporations. Wednesday’s disclosure went on to say the threat group downloaded proprietary BIG-IP source code information about vulnerabilities that had been privately discovered but not yet patched. The hackers also obtained configuration settings that some customers used inside their networks.
Control of the build system and access to the source code, customer configurations, and documentation of unpatched vulnerabilities has the potential to give the hackers unprecedented knowledge of weaknesses and the ability to exploit them in supply-chain attacks on thousands of networks, many of which are sensitive. The theft of customer configurations and other data further raises the risk that sensitive credentials can be abused, F5 and outside security experts said.
Customers position BIG-IP at the very edge of their networks for use as load balancers and firewalls, and for inspection and encryption of data passing into and out of networks. Given BIG-IP’s network position and its role in managing traffic for web servers, previous compromises have allowed adversaries to expand their access to other parts of an infected network.
F5 said that investigations by two outside intrusion-response firms have yet to find any evidence of supply-chain attacks. The company attached letters from firms IOActive and NCC Group attesting that analyses of source code and build pipeline uncovered no signs that a “threat actor modified or introduced any vulnerabilities into the in-scope items.” The firms also said they didn’t identify any evidence of critical vulnerabilities in the system. Investigators, which also included Mandiant and CrowdStrike, found no evidence that data from its CRM, financial, support case management, or health systems was accessed.
The company released updates for its BIG-IP, F5OS, BIG-IQ, and APM products. CVE designations and other details are here. Two days ago, F5 rotated BIG-IP signing certificates, though there was no immediate confirmation that the move is in response to the breach.
Source link
#Hack #Created #Imminent #Threat #Thousands #Networks

![‘Ninja Scroll’ Is Slashing Back to Theaters in October
The 1993 samurai anime film Ninja Scroll is coming back with a limited theatrical run this fall. Per IGN, Iconic Events and AMC are teaming for a re-release on October 4, 5, and 7. (At time of writing, it’s exclusively locked to North America.) The remastered version will play its original 35mm negatives in 4K using a process that “repairs any damage and [performs] color correction to create an archival-quality digital master of the film.” Directed and written by Yoshiaki Kawajiri and created by Animate Film, Ninja Scroll tells the story of mercenary swordsman Kibagamei Jubei. Set in feudal Japan, Jubei is tasked with killing the Eight Devils of Kimon, supernatural ninjas aiming to take over the Tokugawa shogunate. Praised for its animation and action, the film was highly regarded when it came out and is considered a great contributor (alongside Akira and Ghost in the Shell) to adult anime’s popularity in the West. (That’s at least true for the Wachowskis, who cited the film as a big influence on The Matrix, and later brought on Kawajiri to direct and write two segments of The Animatrix.) [embed]https://www.youtube.com/watch?v=jrfUIekIpEA[/embed] In the years since Ninja Scroll’s release, it’s become a bit of a franchise unto itself: it had a standalone sequel series in 2003 and a 12-issue miniseries in 2006 by J. Torres and Michael Chang Ting Yu.
Animation studio Madhouse announced a sequel in 2008 helmed by Kawajiri that stalled out, and that same year saw Warner Bros. announce a live-action movie that also didn’t go anywhere. (Oh, noooooo, that’s sooooooo sad.) Tickets for the Ninja Scroll re-release will go on sale in the coming weeks. Want more io9 news? Check out when to expect the latest Marvel, Star Wars, and Star Trek releases, what’s next for the DC Universe on film and TV, and everything you need to know about the future of Doctor Who. #Ninja #Scroll #Slashing #Theaters #OctoberNinja Scroll,Yoshiaki Kawajiri ‘Ninja Scroll’ Is Slashing Back to Theaters in October
The 1993 samurai anime film Ninja Scroll is coming back with a limited theatrical run this fall. Per IGN, Iconic Events and AMC are teaming for a re-release on October 4, 5, and 7. (At time of writing, it’s exclusively locked to North America.) The remastered version will play its original 35mm negatives in 4K using a process that “repairs any damage and [performs] color correction to create an archival-quality digital master of the film.” Directed and written by Yoshiaki Kawajiri and created by Animate Film, Ninja Scroll tells the story of mercenary swordsman Kibagamei Jubei. Set in feudal Japan, Jubei is tasked with killing the Eight Devils of Kimon, supernatural ninjas aiming to take over the Tokugawa shogunate. Praised for its animation and action, the film was highly regarded when it came out and is considered a great contributor (alongside Akira and Ghost in the Shell) to adult anime’s popularity in the West. (That’s at least true for the Wachowskis, who cited the film as a big influence on The Matrix, and later brought on Kawajiri to direct and write two segments of The Animatrix.) [embed]https://www.youtube.com/watch?v=jrfUIekIpEA[/embed] In the years since Ninja Scroll’s release, it’s become a bit of a franchise unto itself: it had a standalone sequel series in 2003 and a 12-issue miniseries in 2006 by J. Torres and Michael Chang Ting Yu.
Animation studio Madhouse announced a sequel in 2008 helmed by Kawajiri that stalled out, and that same year saw Warner Bros. announce a live-action movie that also didn’t go anywhere. (Oh, noooooo, that’s sooooooo sad.) Tickets for the Ninja Scroll re-release will go on sale in the coming weeks. Want more io9 news? Check out when to expect the latest Marvel, Star Wars, and Star Trek releases, what’s next for the DC Universe on film and TV, and everything you need to know about the future of Doctor Who. #Ninja #Scroll #Slashing #Theaters #OctoberNinja Scroll,Yoshiaki Kawajiri](https://gizmodo.com/app/uploads/2026/06/ninja-scroll-hed-1280x853.jpg)
Post Comment