North Korean cyber spies established two firms, Blocknovas and Softglide, in the US to infect cryptocurrency developers with malware, violating Treasury sanctions, according to US cybersecurity firm Silent Push. A third firm, Angeloper Agency, was also involved but unregistered in the US. This represents a rare instance of North Korean hackers setting up legitimate US entities to target job seekers. The hackers belong to a Lazarus Group subgroup, part of North Korea’s main foreign intelligence agency.

A Data Breach at Yale New Haven Health Compromised 5.5 Million Patients’ Information
Yale New Haven Health database was compromised, affecting over 5.5 million patients’ personal data after the organization noticed unusual activities on its system. Stolen information