Cybersecurity Policy Report, Federal Agencies Ordered to Address ‘Imminent’ Cyber Threat, (Oct 15, 2025)
Organizations Mentioned:CrowdStrike
Federal agencies today were ordered to apply security patches to devices or software provided by F5, Inc., after the company discovered that nation-state hackers had infiltrated F5’s product development environment.
“A nation-state cyber threat actor poses an imminent risk, with the potential to exploit vulnerabilities in F5 products to gain unauthorized access to embedded credentials and Application Programming Interface (API) keys,” the Cybersecurity and Infrastructure Security Agency said in a news release.
“Such exploitation could allow the threat actor to move laterally within an organization’s network, exfiltrate sensitive data, and establish persistent system access, potentially leading to a full compromise of targeted information systems,” CISA warned.
CISA issued an emergency directive, pursuant to its authority under the Federal Information Security Modernization Act of 2014, requiring federal civilian executive branch (FCEB) agencies to patch any of their compromised F5 systems by Oct. 22.
F5 discovered in August that “a highly sophisticated nation-state threat actor maintained long-term, persistent access to, and downloaded files from, certain F5 systems,” the Seattle-based company said in a news release.
“We have taken extensive actions to contain the threat actor. Since beginning these activities, we have not seen any new unauthorized activity, and we believe our containment efforts have been successful,” it said.
“In response to this incident, we are taking proactive measures to protect our customers and strengthen the security posture of our enterprise and product environments,” F5 added. “We have engaged CrowdStrike, Mandiant, and other leading cybersecurity experts to support this work, and we are actively engaged with law enforcement and our government partners.”
Although CISA’s emergency directive applies only to FCEB agencies, Madhu Gottumukkala, the agency’s acting director, recommended that all F5 users follow it.
“The alarming ease with which these vulnerabilities can be exploited by malicious actors demands immediate and decisive action from all federal agencies,” he said. “These same risks extend to any organization using this technology, potentially leading to a catastrophic compromise of critical information systems. We emphatically urge all entities to implement the actions outlined in this Emergency Directive without delay.”
News: FederalLegislation DataSecurity