North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

The Hacker News feed highlights active exploitation of critical vulnerabilities, including WordPress, PaperCut, ownCloud, Cosmos EVM, ServiceNow, Next.js, cPanel, router firmware, and humanoid robots. It also covers state-sponsored espionage by China- and DPRK-linked actors, ransomware operations using AI coding tools, malware distribution through signed adware and browser extensions, ClickFix social engineering, and emerging AI-agent security risks. Multiple reports describe unauthenticated or root-level remote code execution and confirmed exploitation, indicating urgent patching and threat-h