CISA calls for “immediate emergency action” over F5 breach

Questions are mounting thick and fast about a major cybersecurity breach at Nasdaq-listed F5 Inc. disclosed today.

(F5 hardware and software connect sensitive internal networks and the internet, handling things like load balancing, firewalls, access proxies, and SSL management etc.)

CISA has called for “immediate emergency action” in the wake of the incident, saying the threat group “presents an imminent threat to federal networks using F5 devices and software.”

Whilst F5 appears to have indicators of compromise available, it is not publishing them publicly: A “threat hunting guide to strengthen detection and monitoring in your environment is available from F5 support,” it said in a short security advisory.