NICKEL TAPESTRY expands fraudulent worker operations

Bys s

The North Korean IT worker scheme grows to include organizations in Europe and Asia and industries beyond the technology sector

Similar Posts

Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

Bys s

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity security flaw impacting Commvault Command Center to its Known Exploited Vulnerabilities (KEV) catalog, a little over a week after it was publicly disclosed. The vulnerability in question is CVE-2025-34028 (CVSS score: 10.0), a path traversal bug that affects 11.38 Innovation Release, from versions

Equifax Class Action Settlement 2024 Payment Started, Claimants Getting Paid Via Checks

Bys s

Urvashi reports: In 2017, Equifax, one of the largest credit reporting agencies in the United States, announced a significant data breach that exposed the personal and financial information of about 147 million individuals. This highly sensitive data included Social Security numbers, birth dates, addresses, and, for some victims, credit card information. News of the breach…

Humboldt Independent Practice Association’s breach notification leaves questions unanswered

Bys s

On November 11, 2024, Humboldt Independent Practice Association (Humboldt IPA) submitted a breach report to HHS that used a placeholder of 500 for the number of patients affected. All we knew from HHS’s entry was that it was some kind of hacking or IT incident involving protected health information located in email. The California entity’s…

OK: Cyberattack shuts down Bartlesville School network, state testing postponed

Bys s

Andy Dossett reports: A network security incident crippled Bartlesville Public Schools’ internet systems, forcing the district to cancel state testing and prompted an investigation into the scope of the breach. Granger Meador, executive director of technology and communications for the district, confirmed May 1 that the disruption rendered many of the district’s computer systems inoperable….

Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware

Bys s

The North Korean threat actors behind Contagious Interview have adopted the increasingly popular ClickFix social engineering tactic to lure job seekers in the cryptocurrency sector to deliver a previously undocumented Go-based backdoor called GolangGhost on Windows and macOS systems. The new activity, assessed to be a continuation of the campaign, has been codenamed ClickFake Interview…