Yazılar

US cybersecurity firm F5 breach linked to Chinese state-backed hackers, sources say

A breach at U.S.-based cybersecurity company F5 has been attributed to state-backed hackers from China, according to two people familiar with the investigation. The revelation comes a day after U.S. officials warned that federal networks using F5 products were being targeted by a “nation-state cyber threat actor.”

Sources told Reuters that the hackers had been inside F5’s network for over a year, gaining access to sensitive files, including parts of the company’s source code and details about vulnerabilities that could be exploited to attack government and corporate systems.

The Cybersecurity and Infrastructure Security Agency (CISA) said the breach posed an imminent threat to U.S. federal networks and urged immediate patching and updates to F5 devices. Acting Director Madhu Gottumukkala warned that the same vulnerabilities could lead to “a catastrophic compromise of critical information systems” across sectors.

F5, which provides security and networking products to both public and private clients, has not commented on the attribution. The company previously confirmed unauthorized access to some internal systems but said its operations were unaffected.

Responding to the allegation, Chinese Embassy spokesperson Liu Pengyu said Beijing “opposes and combats hacking activities in accordance with the law” and criticized what it called “false information for political purposes.”

U.S. investigators are continuing to assess the full scope of the breach, which highlights the persistent cybersecurity risks facing key technology providers in both government and industry supply chains.

US Responds to Chinese-Linked Cyber Attacks on Telecoms Firms

The United States has taken action in response to Chinese-linked cyber-espionage operations targeting U.S. telecom firms, as confirmed by U.S. national security adviser Jake Sullivan on Friday. Telecom giants AT&T and Verizon disclosed late last year that their networks had been breached by cyber attackers, although both companies have since secured their systems after collaborating with the U.S. government and law enforcement agencies.

Sullivan highlighted the U.S. government’s efforts to address the ongoing threat, mentioning specific cyber operations like “Salt Typhoon” and “Volt Typhoon.” He emphasized that the U.S. has conveyed a clear message to the People’s Republic of China (PRC) regarding the consequences of further actions that could jeopardize American critical infrastructure, underscoring that the U.S. is prepared to respond accordingly.