Five individuals, including four Americans and one Ukrainian, admitted to facilitating North Korea's revenue schemes by using stolen identities to help DPRK agents secure remote jobs with U.S. companies. Their actions impacted 136 firms and generated over $2.2 million for the North Korean regime. The DOJ is also pursuing the seizure of $15 million in cryptocurrency linked to these cyber crimes.

A new Linux malware named Koske uses seemingly harmless panda JPEG images to deploy sophisticated malware directly into system memory, leveraging vulnerabilities in exposed JupyterLab instances. The malware, believed to be developed with AI assistance, deploys cryptocurrency miners and employs advanced tactics to maintain persistence and evade detection. Researchers warn that the adaptability of Koske could lead to even more dangerous variants in the future.