A network of suspected North Korean IT workers is using GitHub to create false identities for remote jobs in Japan and the U.S. They impersonate professionals from Vietnam, Japan, and Singapore to support North Korea’s missile programs. Their tactics include manipulating GitHub accounts and avoiding social media. Stronger verification processes for remote developers are recommended to prevent infiltration.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,