New North Korean AI Hiring Scheme Targets US Companies

A cluster of high-impact security events and trends: nation-state actors (North Korea, Iran) are leveraging AI, stolen identities, and targeted breaches to infiltrate organizations and leak sensitive communications; widespread phishing campaigns are bypassing MFA in Microsoft 365 environments; multiple large-scale data breaches (Crunchyroll, Navia, P3 Global) exposed millions of records; a critical Chrome update patched eight high-severity flaws affecting billions of users while TP‑Link fixed an unauthenticated firmware-upload flaw that could allow router takeover. Concurrently, exploit leaks—