North Korea

The latest North Korean IT worker case needed no exploit, only a convincing interview. Why hiring is now part of your security perimeter.

Researchers at JFrog traced a fresh npm supply chain attack to North Korea’s Lazarus group, six lookalike packages built to steal developer credentials and cloud keys.