Studying Fraudulent North Korean IT Workers

A security-news digest covering North Korean IT-worker fraud, hidden capabilities and backdoors in AI models, geopolitical bias in Qwen3-Coder, critically weak eMudhra TLS certificate keys, two critical unauthenticated remote-code-execution vulnerabilities in PHP, a possible Cellebrite iPhone radio zero-day, and adaptive AI systems capable of solving CAPTCHAs. The most immediate operational risks are the PHP vulnerabilities and compromised TLS certificates; the AI and North Korean-worker items describe emerging supply-chain, insider-threat, and evasion concerns.