Topic

North Korea: news, advisories and analysis

3 articlesUpdated 3 Oct 2026

CyberSecureToday covers North Korea across 3 articles published between 12 Sep 2026 and 3 Oct 2026. The coverage includes 1 vulnerability advisory and 2 incident or breach reports. 1 advisory is rated critical or high severity.

Stories on North Korea most often intersect with Cryptocurrency Theft, WaterPlum and Contagious Interview, with Technology, Cloud & SaaS the most affected sector. The most recent story, “North Korea's WaterPlum Infected 30,000 Developer PCs via npm and VS Code”, was published 3 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

Cyber AttackCloud & SaaS
North Korea's WaterPlum Infected 30,000 Developer PCs via npm and VS Code
Japan, US, Australian and German agencies say DPRK's WaterPlum hit 30,000+ PCs and 7,000+ crypto wallets via fake job tests, npm malware and VS Code tasks.
Mei-Lin Chen3 Oct 20267 min read
Cyber AttackBanking & Fintech
Bitget Confirms $387.5M Cryptocurrency Theft Exploited Zero-Day Flaws in Perimeter Security Appliances
Threat actors exploited zero-day flaws in third-party perimeter security appliances to breach Bitget's wallet job server, siphoning $387.5M across 11 chains.
Priya Raman2 Oct 20269 min read
ThreatsGov & DefenceCritical
North Korean actors deploy trojanized HAProxy 'TED' backdoor inside South Korean enterprise networks
Rapid7 Labs uncovers TED, an elusive Linux implant compiled directly into HAProxy load balancers at automotive and media firms, hiding C2 and manipulating live traffic.
Daniel Okafor12 Sep 20266 min read

Latest coverage

North Korea's WaterPlum Infected 30,000 Developer PCs via npm and VS Code

Bitget Confirms $387.5M Cryptocurrency Theft Exploited Zero-Day Flaws in Perimeter Security Appliances

North Korean actors deploy trojanized HAProxy 'TED' backdoor inside South Korean enterprise networks