Daily Cybersecurity Threats and Vulnerabilities

Multiple cybersecurity incidents reported including F5 BIG-IP vulnerabilities, Axios NPM supply chain compromise, NoVoice Android malware affecting 2.3M devices, and targeted attacks by China-linked TA416 and North Korean Kimsuky groups.

Axios-Http.Com

Armis

F5

Progress

Github

Cisco

Microsoft

Axios npm Supply Chain Breach Mitigation

Microsoft detailed detection and mitigation steps for a supply chain compromise involving malicious Axios npm releases attributed to North Korean threat actor Sapphire Sleet, affecting versions 1.14.1 and 0.30.4.

Axios-Http.Com

Npm, Inc.

Gbhackers On Cyber Security

Microsoft

Axios NPM packages breached in supply chain attack

Malicious actors compromised Axios HTTP client releases on npm, injecting a trojan capable of executing commands and stealing data.

Axios-Http.Com

Npm, Inc.