7 paragraphs in Risk Factors of the 10-K filed Nov 25, 2025
with nothing like them in the 10-K filed Nov 18, 2024. Quoted exactly.
Paragraphs that were only edited are under 10-K change.
Compared with the Risk Factors in the latest 10-K of the other 74 Technology companies:
a paragraph with at least half its words the same at another company is called similar, and the companies are listed under it.
A paragraph most of them have is marked boilerplate. No line means no other company has one like it.
This counts text; it does not say how serious a risk is.
•The Cyber Incident has had and may continue to have an adverse effect on our business, reputation, customer, employee and partner relations, results of operations, financial condition and cash flows;
Similar paragraph at 3 of 74 other Technology companies:
ADI,
CRWD,
MRVL
The Cyber Incident has had and may continue to have an adverse effect on our business, reputation, customer, employee and partner relations, results of operations, financial condition and cash flows
The Cyber Incident may harm our reputation, our customers, employee and partner relations and our operations and business. Customers may in the future defer purchasing or choose to cancel or not renew their agreements or subscriptions with us.
We may expend significant costs and expenses related to the Cyber Incident including in connection with our investigations, and to address the damage to our reputation, customer, employee and partner relations. If we are unable to maintain the trust of our current and prospective customers and partners, or our personnel continue to have to devote significant time to the Cyber Incident, our business, market share, results of operations and financial condition could be negatively affected.
As a result of the Cyber Incident and market forces beyond our control, the cost of our insurance may increase substantially, and we may not be able to obtain additional or comparable insurance coverage on commercially reasonable terms. In addition, governmental authorities investigating the Cyber Incident may seek to impose undertakings, injunctive relief, consent decrees, or other civil or criminal penalties, which could, among other things, materially increase our software development and related expenses or otherwise require us to alter how we operate our business. Further, any legislative or regulatory changes adopted in reaction to the Cyber Incident could require us to make modifications to the operation of our business that could have an adverse effect or increase or accelerate our compliance costs.
We have not seen any evidence of modification to our software supply chain, including our source code and our build release pipelines. We have confirmed that the threat actor exfiltrated files from our BIG-IP product development environment and engineering knowledge management platform. The discovery of new or different information regarding the Cyber Incident, including with respect to its scope and impact on our systems, products or customers, could increase our costs and liabilities related to the Cyber Incident and result in further damage to our business, reputation, intellectual property, results of operations and financial condition. The Cyber Incident also may embolden other threat actors to further target our systems, which could result in additional harm to our business. We cannot ensure that our steps to secure our systems, our product development environments and protect the security and integrity of the products that we deliver will be successful to protect against threat actors or cyberattacks or perceived by existing and prospective customers as sufficient to address the harm caused by the Cyber Incident.
Read in the 10-K ↗
Our industry is characterized by the existence of a large number of patents and frequent claims and related litigation regarding patent and other intellectual property rights. In the ordinary course of our business, we are involved in disputes and
Read in the 10-K ↗
New in the latest 10-Q
18 paragraphs in the 10-Q filed Aug 6, 2026 with nothing like
them in the 10-Q filed May 5, 2026 (at least half the words must differ; new numbers alone do not count).
Quoted exactly, grouped by the item heading above them. This is text that changed, not a judgement of how serious it is.
Risk Factors
Security vulnerabilities or control failures in our IT infrastructure or multicloud application delivery and security products and services as well as unforeseen product errors could have a material adverse impact on our business, results of operations, financial condition and reputation
Read in the 10-Q ↗
In the ordinary course of business, we store sensitive data, including intellectual property, personal data, our proprietary business information and that of our customers, suppliers and business partners on our networks. In addition, we store sensitive data through cloud-based services that may be hosted by third parties and in data center infrastructure maintained by third parties. The secure maintenance of this information is critical to our operations and business strategy. Our IT infrastructure and those of our partners and customers are subject to the increasing threat of intrusions by a wide range of bad actors and malicious parties, including computer programmers, hackers or sophisticated nation-state and nation-state supported actors, or they may be compromised due to employee error or wrongful conduct, malfeasance, or other disruptions. Despite our security measures, and those of our third-party vendors, our IT infrastructure has experienced breaches or disruptions, including the Cyber Incident, and may be vulnerable in the future to breach, attacks or disruptions. If any breach or attack, including the Cyber Incident, compromises our IT infrastructure, creates system disruptions or slowdowns or exploits security vulnerabilities therein, the information stored on our networks or those of our customers could be accessed and modified, publicly disclosed, or lost or stolen, and we may be subject to liability to our customers, individuals, suppliers, business partners and others, and may suffer reputational and financial harm.
Read in the 10-Q ↗
Our multicloud application delivery and security products and services are used by our customers to manage their critical applications and data. Bad actors and other malicious parties, have in the past and may attempt in the future to exploit security vulnerabilities and control weaknesses in our internal IT infrastructure or cloud environments that support our SaaS-based and managed solutions and services as well as our products that may be deployed in a customer environment. Despite our efforts to harden our IT infrastructure, our delivery and security products and services against these risks, those efforts may not be successful, and from time to time, those systems and products could be compromised. Threat actors can seek to exploit, among other things, known or unknown vulnerabilities and control weaknesses in technology included in our IT infrastructure, delivery and security products and services, and failure to quickly identify, patch or mitigate security vulnerabilities or strengthen security controls could render our IT infrastructure, delivery and security products and services susceptible to a cyber-attack which may subject the Company to liability to our customers, suppliers, business partners and others, as well as reputational and financial harm. Moreover, inadequate or incomplete security monitoring, logging, asset management, or internal reporting and escalation, or gaps in coverage of security tools in our environment, could impact our ability to detect and respond to threats early and efficiently, giving threat actors an opportunity to gain or maintain access to our environment undetected. Finally, we rely on a number of third parties who connect to our network or with whom we share data, to support our business and operations, and to the extent that these third parties have weaknesses or deficiencies in their security program or vulnerabilities, they present business, operational, reputational, financial and legal risk. If any one or more of these vendors' security is compromised, it could have similar consequences as if we experienced a security event ourselves.
Read in the 10-Q ↗
Our products may also contain undetected errors, defects, or vulnerabilities when first introduced or as new versions are released. We have experienced these issues in the past in connection with new products and product upgrades. Our products also must successfully operate with products from other vendors. As our products and customer IT infrastructures become increasingly complex, customers may also experience unforeseen errors in implementing our products into their IT environments or integrating them with other vendor products. We expect that these errors, defects, or vulnerabilities will be found from time to time in new or enhanced products after commencement of commercial shipments. Any of these may temporarily or permanently disable our end-customers’ networks, information technology infrastructure or other systems, or expose our end-customers’ networks to attacks or compromise from security threats. These problems may cause us to incur significant warranty and repair costs, divert the attention of our engineering personnel from our product development efforts, cause significant customer relations problems, result in legal claims or liability, and impact demand for our products and services. We may also be subject to liability claims for damages. We carry insurance policies covering these types of liabilities, but these policies may not provide sufficient protection should a claim be asserted. A material product liability claim may harm our business and results of operations.
Read in the 10-Q ↗
Advances in AI capabilities, including increasingly sophisticated AI models and coding agents capable of autonomously creating, discovering and exploiting vulnerabilities and other security issues, are becoming more broadly accessible, including to nation-state actors and other well-resourced threat actors. These tools can enable faster identification and exploitation and more significant impact by threat actors, shortening the time to detect attacks and expanding the time and resources required to respond to them. These tools may be leveraged against the AI infrastructure of the Company and our third-party vendors, our multicloud application delivery and security products and services, and our other products. Threat actors may also target our AI models and supporting systems for our products and services in ways that we cannot yet anticipate.
Read in the 10-Q ↗
Any errors, defects, control failures, or vulnerabilities in our products or IT infrastructure, including the Cyber Incident, could result in:
Read in the 10-Q ↗
• expenditures of significant financial and product development resources in efforts to analyze, correct, eliminate, or work-around errors and defects or to address and eliminate vulnerabilities;
Read in the 10-Q ↗
• remediation costs, such as liability for stolen assets or information, repairs or system damage;
Read in the 10-Q ↗
• increased cybersecurity protection costs which may include systems and technology changes, training, and engagement of third party experts and consultants;
Read in the 10-Q ↗
• loss of proprietary information leading to lost competitive positioning and lost revenues;
Read in the 10-Q ↗
• delay or failure to attain market acceptance or decrease in demand for our products and services;
Read in the 10-Q ↗
• an increase in warranty claims compared with our historical experience, or an increased cost of servicing warranty claims, either of which would adversely affect our gross margins; and
Read in the 10-Q ↗
• litigation, regulatory inquiries, or investigations that may be costly and harm our reputation.
Read in the 10-Q ↗
Risks related to the development, deployment, and use of artificial intelligence ("AI") could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm our business
Read in the 10-Q ↗
We currently incorporate AI technology in certain of our products and services and in our business operations and our research and development efforts in this area are ongoing. The development and deployment of AI involve inherent risks, technical challenges, and potential unintended consequences that could adversely affect our and our customers' adoption and use of these technologies. For example, AI solutions may use algorithms, datasets, or training methodologies that are incomplete, reflect biases, or contain other flaws or deficiencies.
Read in the 10-Q ↗
Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. There is a risk that AI technologies could automate or simplify functions currently performed by our application delivery and security solutions. If customers or investors believe that AI tools can replicate or replace aspects of our offerings, demand for our products and services could decline, and our competitive position could be weakened. Market sentiment regarding AI's potential to disrupt the application delivery and security industry could negatively affect our stock price and business, regardless of whether such disruption actually materializes or impacts our competitive position.
Read in the 10-Q ↗
While we aim to develop and use AI responsibly and attempt to identify and mitigate ethical and legal issues presented by its use, we may be unsuccessful in identifying or resolving issues before they arise. The rapid pace of AI development and the emergence of new regulations require us to commit substantial resources to ensure our AI-enabled products and services meet evolving legal and technical standards. The AI-related legal and regulatory landscape remains uncertain and may be inconsistent from jurisdiction to jurisdiction. Our obligations to comply with the evolving legal and regulatory landscape could entail significant costs or limit our ability to incorporate certain AI capabilities into our offerings.
Read in the 10-Q ↗
AI-related issues, deficiencies and/or failures could (i) give rise to legal and/or regulatory action, including with respect to proposed legislation regulating AI in jurisdictions such as the European Union and others, and as a result of new applications of existing data protection, privacy, intellectual property, and other laws; (ii) damage our reputation; or (iii) otherwise materially harm our business.
Read in the 10-Q ↗
The 10-Q's risk factors against the 10-K
Item 1A of the 10-Q filed Aug 6, 2026 against Item 1A of the 10-K filed Nov 25, 2025.
A 10-Q repeats only the risks that changed, so a 10-K paragraph that is missing from it is not counted as removed.
Added is a paragraph with nothing like it in the 10-K, Reworded a sentence that is in both with several words changed,
Quiet changes a sentence in both where one to four words changed and one is a hedge or a modal
(cut words struck through, new words highlighted and underlined).
Text on the page, not a score; each links to the filing at sec.gov.
What the 10-Q itself says about its risk factors:
There have been no material changes to our risk factors from those described in Part I, Item 1A, "Risk Factors" of our Annual Report on Form 10-K for the fiscal year ended September 30, 2025, which was filed with the Securities and Exchange Commission on November 25, 2025, except for those set forth below.
Read in the 10-Q ↗
Added10-Q 2026-08-06 vs 10-K 2025-11-25
Advances in AI capabilities, including increasingly sophisticated AI models and coding agents capable of autonomously creating, discovering and exploiting vulnerabilities and other security issues, are becoming more broadly accessible, including to nation-state actors and other well-resourced threat actors. These tools can enable faster identification and exploitation and more significant impact by threat actors, shortening the time to detect attacks and expanding the time and resources required to respond to them. These tools may be leveraged against the AI infrastructure of the Company and our third-party vendors, our multicloud application delivery and security products and services, and our other products. Threat actors may also target our AI models and supporting systems for our products and services in ways that we cannot yet anticipate.
Read it in the 10-Q at sec.gov ↗
Added10-Q 2026-08-06 vs 10-K 2025-11-25
We currently incorporate AI technology in certain of our products and services and in our business operations and our research and development efforts in this area are ongoing. The development and deployment of AI involve inherent risks, technical challenges, and potential unintended consequences that could adversely affect our and our customers' adoption and use of these technologies. For example, AI solutions may use algorithms, datasets, or training methodologies that are incomplete, reflect biases, or contain other flaws or deficiencies.
Read it in the 10-Q at sec.gov ↗
Added10-Q 2026-08-06 vs 10-K 2025-11-25
Additionally, AI technologies are complex and rapidly evolving, and we face significant competition in the market and from other companies regarding such technologies. There is a risk that AI technologies could automate or simplify functions currently performed by our application delivery and security solutions. If customers or investors believe that AI tools can replicate or replace aspects of our offerings, demand for our products and services could decline, and our competitive position could be weakened. Market sentiment regarding AI's potential to disrupt the application delivery and security industry could negatively affect our stock price and business, regardless of whether such disruption actually materializes or impacts our competitive position.
Read it in the 10-Q at sec.gov ↗
Reworded10-Q 2026-08-06 vs 10-K 2025-11-25
Issues Risks related to the development development, deployment, and use of artificial intelligence ("AI") could give rise to legal and/or regulatory action, damage our reputation or otherwise materially harm our business
Read it in the 10-Q at sec.gov ↗ · The 10-K sentence ↗
