Sophisticated Earth Estries Group Hack Government Agencies and Tech Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new sophisticated cyber espionage group named Earth Estries, which overlaps notorious threat group FamousSparrow, was unveiled. The group has been active since 2020 and targets multiple government and technology …

Apple Opens Application for Security Research Device Program

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple launched the Security Research Device (SRD) program, enabling security researchers to examine the security features of a specially-built hardware variant of the iPhone 14 Pro. Apple Security Bounty is …

Vulnerability in IBM Security Verify Let Attacker Extract Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple Information Disclosure vulnerabilities were discovered in the IBM Security Verify Information Queue, which can reveal several internal product details. This information can then be used to conduct further attacks.  …

Threat and Vulnerability Roundup for the week of August 27th to September 2nd

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

We are glad to present the most recent news on cybersecurity in this week’s Threat and Vulnerability Roundup from Cyber Writes.  The latest attack techniques, significant weaknesses, and exploits have …

SapphireStealer: A .NET Malware Capable of Stealing Sensitive Data from Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SapphireStealer is an open-source information stealer that may be utilized for obtaining sensitive information, such as corporate credentials, which are frequently sold to other threat actors who utilize the access for …

North Korea’s Hacker Group Deploys Malicious Version of Python Package in PyPI Repository

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ReversingLabs spotted “VMConnect” in early August, a malicious supply chain campaign with two dozen rogue Python packages on PyPI. It’s been observed that these packages mimicked the following known open-source …

Junos OS Flaw Allows a Network-based Attacker to Launch DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Junos OS and Junos OS Evolved have been found to be vulnerable to a DoS (Denial of Service) condition, which an unauthenticated, network-based attacker can exploit. Juniper Networks has addressed …

AI Coding Platform Sourcegraph Breached Via Leaked Admin Access Token

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On August 30, 2023, a malicious actor gained unauthorized access to specific Sourcegraph(.)com data through a leaked admin access token. Sourcegraph is a code AI platform that makes it easy …