The United States Government issued an emergency warning regarding cyberattacks targeting the federal network through security loopholes on devices belonging to cybersecurity firm F5 Inc.
The Cybersecurity and Infrastructure Agency (Cybersecurity and Infrastructure Security Agency/CISA) stated that the government network is being attacked by state cyber threat actors' trying to exploit vulnerabilities in F5 products. In its statement, CISA revealed that hackers had successfully penetrated the internal F5 system and stolen a number of files, including some source code and information on product vulnerability.
It is feared that this information could be used as a road map' to penetrate F5 devices and software used in government networks, potentially causing a total compromise of the targeted system.
SEE ALSO:
-
| TEKNOLOGI
Bitcon Melemah, Perang Dagang AS–China Picu Tekanan Baru bagi Pasar Kripto
16 Oktober 2025, 16:31 -
| TEKNOLOGI
HONOR Bagikan Bocoran Soal Perangkat Robot Phone Barunya Tahun Depan
16 Oktober 2025, 15:35
CISA considers this threat a real and urgent danger to federal networks using F5 products. Nick Andersen, Executive Director of Cybersecurity at CISA, said it had ordered all government agencies to immediately identify F5 devices on their respective networks and make emergency updates. He also appealed to the private sector to do the same because the risk extends to all organizations that use the product.
F5 previously confirmed that it did detect illegal access to several internal systems on August 9, 2025, but confirmed that the incident did not affect the company's operations. In its report to the US Securities and Exchange Commission (SEC), the F5 said it had taken broad steps to address the threat by involving well-known cybersecurity companies such as CrowdStrike, Mandiant, NCC Group, and IOActive.
The company also ensures there is no evidence that its software development process has been manipulated. However, F5 admits that a small portion of customer data has been affected, and it has contacted them directly.
The US Department of Justice had delayed public announcements regarding this breach until 12 September 2025 on national security grounds.
The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)
