A notorious hacker, believed to be behind several recent breaches of major tech companies, has added Apple to his list after claiming to have the source code for three of the company's internal tools , following a data breach in June 2024.
See also: Member of Scattered Spider hackers arrested
The hacker, known as IntelBroker on the criminal forums he frequents, has previously claimed to have extracted data from breaches at Europol and AMD. After posting on X about the source code of three internal tools used at Apple, including a single sign-on authentication system known as AppleConnect, IntelBroker's account was suspended. However, a post from the Dark Web Informer reiterates the claim, along with a screenshot from a forum showing the tools referred to as AppleConnect-SSO, Apple-HWE-Confluence-Advanced, and AppleMacroPlugin.
The BreachForums post by IntelBroker stated: "I'm releasing the internal source code for three of Apple's commonly used tools for their internal website, thanks for reading and enjoy!"
See also: North Korean hackers target Brazil
An analysis of the leaked code by the security team at cybersecurity consulting firm AHCTSrevealed that the released code is not actually the source of the internal tools themselves, but rather “proprietary internal plugins and configurations” used “to connect Apple’s proprietary authentication systems to Atlassian Jira and Confluence, for Single Sign On authentication within Apple’s corporate network.”
The highly technical analysis by AHCTS concludes that the leak of these custom plugins “poses significant cybersecurity risks,” but no products or services are affected. The detailed configurations and sensitive information contained in the code could, AHCTS said, “potentially be used by malicious actors.”
See also: Scattered Spider hackers collaborate with RansomHub
A data breach, such as the one claimed by the Apple hacker, is a security incident where confidential, sensitive, or protected information is accessed, disclosed, or used without authorization. These breaches can occur for a variety of reasons, including cyberattacks, insider threats, or even accidental data exposure. The consequences of a data breach can be severe, ranging from financial loss and reputational damage to legal ramifications and loss of consumer trust. Organizations must implement rigorous security measures, continuously monitor their systems, and educate employees on data protection practices to mitigate the risk of breaches.
Source: forbes
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
