Studying Fraudulent North Korean IT Workers
Schneier on Security (1 hour ago)
Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
Read the full story on Schneier on Security.
More from this category
Cybersecurity
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Hackers threatened to install ransomware on user devices, but they never did.
Cybersecurity
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
Cybersecurity
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
Cybersecurity
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.
Cybersecurity
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
Cybersecurity
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell.
Latest from Schneier on Security
Artificial Intelligence
Hiding Capabilities in AI Models
Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited.
Cybersecurity
Bias in Qwen3-Coder Model
Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes.
Cybersecurity
Friday Squid Blogging: Increasing Squid Populations
This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Cybersecurity
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident.
Latest digest
Week 43
EN
Popular stories
-
What the £350 Grand Theft Auto ‘collector’s box’ says about the escalating cost of gaming
The Guardian Technology
-
Sources
71 active sources
26 Turkish · 45 English
All sources
