US citizens have admitted to helping North Korean IT workers infiltrate American companies using stolen identities. The scheme involved laptop farms and bypassing security checks to generate funds for DPRK’s military programs.
Federal prosecutors revealed a sophisticated scheme where North Korean IT workers used stolen identities and laptop farms to secure remote positions at US companies. The operation generated over $2.2 million for North Korea’s weapons programs while compromising 136 American companies. Four US citize
DoorDash suffered another data breach affecting users in the US, Canada, Australia, and New Zealand. An employee fell for a social engineering scam, giving hackers access to customer contact information. The company waited 19 days to notify affected users.
New research shows AI models are fundamentally unreliable, failing 60% of queries and generating vulnerable code 45% of the time. Security experts warn this creates unprecedented chaos in enterprise environments where AI is being deployed at scale.
New research reveals enterprises are drowning in applications, with an average of 1,100 apps per organization. Yet only about half properly integrate with identity governance systems, creating dangerous security gaps that attackers love.
November’s Patch Tuesday brings a welcome break with only 63 Microsoft patches and just one zero-day vulnerability. The update affects Windows desktop platforms and requires immediate attention despite the reduced volume. Organizations can follow standard patching schedules for most Microsoft produc
Companies are more vulnerable than ever to crises that can destroy their reputation in hours. New research reveals most organizations lack basic crisis management plans, especially for emerging AI risks. Here’s how to spot if your workplace is unprepared.
Passkeys represent our passwordless future, but the authenticator technology behind them remains confusing for most users. Understanding the three types of authenticators—platform, virtual, and roaming—is essential for making smart security choices as we transition away from traditional passwords.
AT&T customers have until December 18 to claim their portion of a $177 million data breach settlement. The settlement covers two major breaches affecting millions of customers between 2019 and 2024. Claimants need their Class Member ID and payment information to file.
Google has successfully dismantled a major text scam operation that targeted Americans with fake E-ZPass and USPS messages. The company filed suit against the “Smishing Triad” group on Wednesday, effectively shutting down their Lighthouse phishing kit. This represents a significant victory in the on
