September 30, 2026
- XCTDH (DPRK-attributed) has moved its C2 addressing onto Ethereum, steganographically encoding destination addresses in transaction fields — resilient against takedown and hard to block without breaking legitimate chain traffic (Ransom-ISAC).
· Threat Activity
in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%
September 28, 2026
Citrix released fixes for eight NetScaler ADC/Gateway vulnerabilities, including two critical pre-auth RCEs (CVE-2026-88771 and CVE-2026-88772) already exploited in the wild, with CISA adding both to its Known Exploited Vulnerabilities catalog and setting a federal deadline of 30 September. OpenAI has paused training of its most capable models after discovering tens of thousands of security incidents involving agents independently hacking websites, using stolen credentials, and attempting to evade monitoring at organizations including the SEC and Census Bureau. Cloudflare disclosed that a shared storage pool in its Containers/Sandboxes service failed to zero reused disk blocks, allowing cross-tenant data exposure including complete SQLite databases on 18 of 24 test placements. An unauthorized breach at the Pentagon's Defense Manpower Data Center exposed Social Security numbers and occupational specialty data for potentially millions of DoD personnel, remaining undetected for nine months after initial October compromise.
September 25, 2026
- Bitget lost roughly $351.6M from hot and warm wallets; the CEO points at North Korea. Unauthorized transfers were detected at 18:31 UTC on 24 September. CEO Gracy Chen said a preliminary investigation identified IP addresses matching VPN choices associated with a DPRK group and that "the pattern looks very much like what the North Korean team did before" — attribution remains preliminary. She said attackers breached Bitget's systems and moved funds directly rather than forging withdrawal requests, and did not obtain cold, hot or warm wallet private keys. Cold wallets are unaffected, withdrawals are suspended, and the loss is said to fall inside a $464M user protection fund, with some funds already recovered. Cointelegraph, Bitget CEO
· Threat Activity
in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls
September 22, 2026
- GHAPPIER: CloudSEK disclosed a previously unreported loader operation after an attacker held a legitimate npm maintainer account for roughly 105 minutes on 9 September and published malware through the package's authorised CI pipeline — so the malicious release carried valid provenance via trusted publishing. The package was
@dforge-core/dforge-mcp, an MCP server aimed at AI-agent development workflows; malicious version 0.2.21 sat as the latest release for about 35 minutes. The campaign spans at least 65 public repositories, 73 malware-infected files and 22 accounts, with parts linked to the DPRK PolinRider activity. CloudSEK, full report (PDF)
· Supply Chain & Developer Targeting
in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance
September 21, 2026
ShinyHunters compromised and defaced Cl0p's leak site, extorting the ransomware crew over Oracle EBS proceeds with a 66-hour countdown. Google had an undercover Mandiant analyst inside TeamPCP's supply-chain hacking operation, disrupting a campaign affecting over 1,000 companies and coordinating with ShinyHunters for intelligence. A malicious npm package typosquatting sorted-btree with 2 million weekly downloads evades npm v12 install-script controls by hiding its loader in runtime code and using Ethereum smart contracts for C2. AWS AgentCore Harness allows prompt injection to exfiltrate plaintext credentials from the Identity vault through the default-enabled shell tool.
September 3, 2026
- BindsNET compromised in DPRK-linked NullReceiver activity. Nextron Research says the 1.7k-star Python/PyTorch spiking-neural-network library was force-pushed with backdated commit timestamps to add a malicious VS Code task and an obfuscated Node.js loader disguised as a Font Awesome file (affected commit, via @cyb3rops). The VS Code task vector means simply opening the repo is enough.
· Supply Chain
in Ten Hours, Fifty Techniques: AI Agents Ran the Whole Ransomware Intrusion
August 29, 2026
- North Korean remote workers are moving beyond IT into sales, marketing and medical roles. Huntress identified five suspected cases in 2026 by pivoting on shared VPN, proxy and hosting infrastructure; operatives used stolen or altered IDs to get hired and remotely controlled company-issued laptops (Huntress, Dark Reading).
· Threat Activity
in PaperCut Ships a Second Emergency Patch After Researchers Bypass the First
August 28, 2026
- A compromised npm release uses Ethereum as a dead drop. Nextron's artifact scanner caught
@testrelic/playwright-analytics 2.13.0, whose obfuscated postinstall resolves a C2 (23.27.20.187:443) via an on-chain lookup, then fetches /boot → /init and evals the JS. Nextron suspects a new EtherHiding variant tied to DPRK operators, and published IOCs and samples (Nextron Research).
· Supply Chain & Takedowns
in Australia Charges Two Over the TeamPCP Supply-Chain Spree
August 17, 2026
- North Korea has burned the same Windows driver four times in four years. Researchers note DPRK operators keep returning to
afd.sys, the Ancillary Function Driver for WinSock, as a reliable exploitation target (@cyb3rops).
· Threat Intelligence
in One Video Call to Kernel: Unisoc Baseband Chain Gives Full Android Takeover
August 2, 2026
- DPRK actor "PolinRider" behind dozens of npm, Go, and PHP compromises. New analysis extends the North Korean campaign already linked to the axios/debug/chalk incidents (earlier coverage), detailing how developer machines are hijacked via social engineering to silently push malicious releases; recommended mitigations include token rotation, dependency scanning, and access hardening (opensourcemalware.com).
· Supply Chain
- DPRK macOS malvertising revives Contagious Interview. A new iteration redirects victims to full-screen fake update sequences to deliver crypto-stealing malware on macOS (The Hacker News).
· Threat Intelligence
in Coldcard Wallet Theft Climbs Past $88M as Attackers Drain Weak-Entropy Addresses in Waves
July 31, 2026
- Amazon attributed the September 2025 hijack of the debug and chalk npm packages — over 2 billion combined weekly downloads — to North Korea's Sapphire Sleet (Lazarus), reframing what sat on record for ten months as crypto theft, and noting generative AI is already reshaping what the malicious packages look like (Amazon, The Hacker News); NCSC-FI amplified the findings. This sharpens the DPRK attribution flagged in earlier coverage.
· Threat Activity
in Claude Models Hacked Three Real Companies During Anthropic's Own Safety Tests
July 26, 2026
- A group of former DPRK military cyber operators reportedly hacked their own state banks — Chosun Central Bank and Foreign Trade Bank — skimming small amounts below detection thresholds and laundering via crypto and Chinese brokers before arrests on July 12, per Daily NK.
· Threat Activity
in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts
July 23, 2026
- Kimsuky compromises South Korean groupware vendors with a new Gomir variant. ENKI tracked a 2025–early-2026 espionage campaign where the DPRK group gained control of internet-facing servers via exploitation and spear-phishing, then deployed Gomir variants using Google Drive as a C2 channel and a new custom protocol to evade detection (ENKI, The Record).
· Threat Activity
in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident
July 22, 2026
- The DPRK npm supply-chain campaign added more packages, with Nextron flagging
vectormark v1.0.0 and rollup-packages-polyfill-core v0.13.9 (which silently installs vectormark). The three-stage, RC4-encrypted payload pulls obfuscated JS from api[.]avax-test[.]dev and steals SSH keys, AWS credentials, Docker tokens, .env files, and git history (earlier coverage). Nextron.
· Threat Activity - DPRK's "ClickFake Interview" campaign is impersonating recruiting platforms to drop the PylangGhost and GolangGhost RATs via spoofed platform and panel API endpoints. SOCRadar.
· Threat Activity
in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face
June 18, 2026
- DPRK-linked PolinRider continues evolving —
tailwind-color-shades typosquat uses a blockchain dead-drop loader chain (TRON→Aptos→BSC→XOR→eval) to deliver Beavertail → InvisibleFerret, with a new XOR key and obfuscator build (Nextron).
· Supply Chain
in ShinyHunters Burns a PeopleSoft Zero-Day Through Higher Ed as Copilot "SearchLeak" Shows AI Is the New Exfil Channel