North Korea stories
Nearly 100 organisations were hit in a six-week phishing spree that used GitHub repositories and Visual Studio Code tools to infect developers.
CrowdStrike said state-backed espionage and extortion are surging as AI assets inside tech groups draw hackers seeking code, models and access.
Losses from North Korea-linked digital asset theft jumped 51% in 2025, exposing banks and fintech firms to more identity-based intrusions.
AI is now being used to write exploits and malware, with Google saying it has traced the first zero-day linked to machine assistance.
Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.
Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.
Australian employers face a growing insider-threat risk as DTEX says North Korean operatives are applying under false identities for tech roles.
North Korean IT workers using Western collaborators and fake identities are infiltrating remote jobs to funnel foreign salaries home.
Cyber extortion has overtaken email scams as the top 2025 attack, as AI-powered threats grow and financial firms become prime targets.
AI is fuelling a surge in cyber attacks, with CrowdStrike warning criminals now move from breach to lateral movement in under 30 minutes.
Okta warns North Korean operatives are landing remote tech jobs with stolen and synthetic identities to fund the regime and enable cyber attacks.
Google flags surging attempts to steal AI models as state-backed hackers weaponise Gemini for phishing, intel gathering and malware support.
Hackers are abandoning noisy ransomware to quietly steal data, as a report finds 80% of top attack techniques now focus on evasion.
CrowdStrike has split North Korea-linked LABYRINTH CHOLLIMA into three units, two for crypto theft and one for industrial espionage.
Google has dismantled IPIDEA's vast residential proxy network, which hijacked millions of consumer devices for global cyber operations.
Team Cymru and Filigran link Pure Signal and Scout with OpenCTI to enrich threat investigations, automate hunts and deepen global context.
Growing use of AI fakery is forcing companies to verify who is really on screen before hiring, approving payments or granting access.
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
UK firms report rising nation-state cyberattacks as average ransomware payouts soar to GBP £7.71 million, outstripping security budgets.
Healthcare is now the prime target for OT and IoT cyber attacks in Australia, as security alerts per organisation surge to third globally.
