US Charges Five People Over North Korean IT Worker Scheme

Summary: U.S. prosecutors charged five people in connection with an alleged scheme that helped North Korean IT workers obtain remote

In Other News: VPN Supply Chain Attack, PayPal $2M Settlement, RAT Builder…

Summary: This security roundup highlights three unrelated incidents with a shared lesson: trusted software, routine payment workflows and even tools

North Korean Fake IT Workers More Aggressively Extorting Enterprises

Summary: U.S. authorities and incident responders warned that fraudulent North Korean remote IT workers have increasingly shifted from wage theft

Subaru Starlink Vulnerability Exposed Cars to Remote Hacking

Summary: Security researchers Sam Curry and Shubham Shah found flaws in Subaru’s employee-facing STARLINK administration portal that could have enabled

FBI: North Korean IT worker scheme involves source code theft, extortion

Summary: The FBI warned U.S. organizations that fraudulent North Korean IT workers are stealing source code and other sensitive data,

Cloud-targeted attacks conducted by TRIPLESTRENGTH operation

Summary: Google Cloud’s Threat Horizons research described TRIPLESTRENGTH, a financially motivated operation that combined cloud account hijacking, cryptocurrency mining and