Tag: North Korea

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/dprk-it-workers-expanding-scope-scale/ Source: Cloud Blog Title: DPRK IT Workers Expanding in Scope and Scale Feedly Summary: Written by: Jamie Collier Since our September 2024 report outlining the Democratic People’s Republic of Korea (DPRK) IT worker threat, the scope and scale of their operations has continued to expand. These individuals pose as legitimate remote workers…

Slashdot: Microsoft Isn’t Fixing 8-Year-Old Shortcut Exploit Abused For Spying

Mar 19, 2025

—

by

Source URL: https://it.slashdot.org/story/25/03/18/2226205/microsoft-isnt-fixing-8-year-old-shortcut-exploit-abused-for-spying?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Isn’t Fixing 8-Year-Old Shortcut Exploit Abused For Spying Feedly Summary: AI Summary and Description: Yes Summary: The text outlines a significant security vulnerability linked to malicious .LNK shortcut files being exploited in an eight-year-long spying campaign. Despite the findings, Microsoft categorizes the issue as a user interface problem,…

Hacker News: North Korea Launders Billions in Stolen Crypto

—

by

Source URL: https://www.coindesk.com/policy/2025/03/07/here-s-how-north-korea-launders-billions-of-stolen-crypto Source: Hacker News Title: North Korea Launders Billions in Stolen Crypto Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the complex methods used by North Korea to launder cryptocurrency stolen through hacks, particularly focusing on their reliance on over-the-counter brokers and other methods due to compliance checks implemented…

Cloud Blog: Cloud CISO Perspectives: 5 tips for secure AI success

—

by

Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-5-tips-secure-ai-success/ Source: Cloud Blog Title: Cloud CISO Perspectives: 5 tips for secure AI success Feedly Summary: Welcome to the first Cloud CISO Perspectives for March 2025. Today, Royal Hansen, vice-president, Engineering, and Nick Godfrey, Office of the CISO senior director, discuss how new AI Protection capabilities in Security Command Center fit in with…

Hacker News: Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying

—

by

Source URL: https://www.theregister.com/2025/03/18/microsoft_trend_flaw/ Source: Hacker News Title: Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a vulnerability identified by Trend Micro that has been exploited in a prolonged espionage campaign, highlighting Microsoft’s response (or lack thereof) to the issue. It underscores the…

The Register: Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying

—

by

Source URL: https://www.theregister.com/2025/03/18/microsoft_trend_flaw/ Source: The Register Title: Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying Feedly Summary: ‘Only’ a local access bug but important part of N Korea, Russia, and China attack picture An exploitation avenue found by Trend Micro has been used in an eight-year-long spying campaign, but there’s no sign of a…

The Register: FCC stands up Council on National Security to fight China in ways that CISA used to

Mar 16, 2025

—

by

Source URL: https://www.theregister.com/2025/03/16/infosec_news_in_brief/ Source: The Register Title: FCC stands up Council on National Security to fight China in ways that CISA used to Feedly Summary: PLUS: Alleged Garantex admin arrested in India; Google deletes more North Korean malware Infosec In Brief United States Federal Communications Commission chair Brendan Carr has unveiled plans to form a…

Hacker News: Lazarus Group deceives developers with 6 new malicious NPM packages

Mar 15, 2025

—

by

Source URL: https://cyberscoop.com/lazarus-group-north-korea-malicious-npm-packages-socket/ Source: Hacker News Title: Lazarus Group deceives developers with 6 new malicious NPM packages Feedly Summary: Comments AI Summary and Description: Yes Summary: The Lazarus Group has infiltrated the npm registry, introducing six malicious packages designed to deceive software developers, steal credentials, and disrupt their workflows. This incident highlights the ongoing threats…

Rekt: Not So Safe

Mar 13, 2025

—

by