North Korean remote workers are broadening their job hunt beyond IT

2026-08-28T20:51:39Z0d0f217d21dc1948129f2ca760cc55a51bb3e17e4004af812e33bb8e0b3a3ec9
CVE-2026-81578CVE-2026-82078CVE-2026-8452AI agent securityAndroid securityChina-linked threat actorCitrix NetScalerDPRK remote workersNorth KoreaPaperCut MFPaperCut NGTeamPCPactive exploitationaviationcyberattackdata breachhealthcare technologylaw enforcement disruptionransomware-impact potentialstate-sponsored activitysupply-chain attackvulnerabilityzero-day

What happened

Help Net Security reports on active cyber threats and security developments, including DPRK remote-worker infiltration into non-IT roles, a Manchester Airports Group data breach, TeamPCP supply-chain attacks, a disruptive Boston Scientific cyberattack, active exploitation of PaperCut NG/MF zero-days (CVE-2026-82078 and CVE-2026-81578), exploitation of Citrix NetScaler flaw CVE-2026-8452, and FBI disruption of a China-linked hacking network. The collection also covers Android 17 privacy protections and AI-agent security guidance.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
helpnetsecurity
Record identifier
0d0f217d21dc1948129f2ca760cc55a51bb3e17e4004af812e33bb8e0b3a3ec9
Enrichment time
2026-08-28T20:51:39Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · North Korean remote workers are broadening their job hunt beyond IT · Baitaphish