Two US nationals arrested in $3M North Korean IT worker fraud scheme
The suspects allegedly hosted and configured company-issued laptops at US locations, allowing overseas workers to access them remotely.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoThe suspects allegedly hosted and configured company-issued laptops at US locations, allowing overseas workers to access them remotely.
3 min readThe zero-day vulnerability is CVE-2026-96951, a Windows Shell security feature bypass that allows attackers to circumvent the Mark of the Web security feature.
3 min readKimsuky used fake conference invitations, research requests and malicious files to steal information, though most of the observed attacks were unsuccessful.
2 min readTracked as CVE-2026-104935, the flaw allows remote attackers to bypass authentication without needing user interaction or special access.
3 min readThe implants were hidden inside Ledger X devices and could capture information from the screen and button presses.
2 min read