npm

If you are still trenching don’t even consider buying anything above $10k

Fake recruiters, fake interviews, malicious coding tasks. DPRK has been doing this for years. What exactly was “highly sophisticated” about that? You say you blocked 57 suspected DPRK-linked attempts. You clearly knew the threat very well, yet a developer still ran a malicious interview assignment on a work laptop 🙈 Your developers, security teams, and everyone with access to sensitive systems should know how DPRK operates, recognize these tactics, and build security around that threat. This has been publicly documented for years 🤦 1. Unit 42 — Hacking Employers and Seeking Employment unit42.paloaltonetworks.com/… 2. Unit 42 — DPRK Threat Actors Lure Tech Industry Job Seekers unit42.paloaltonetworks.com/… 3. Securonix — Analysis of DEV#POPPER securonix.com/blog/analysis-… 4. Securonix — DEV#POPPER Research Update securonix.com/blog/research-… 5. Datadog — Tenacious Pungsan securitylabs.datadoghq.com/a… 6. SentinelOne — macOS FlexibleFerret sentinelone.com/blog/macos-f… 7. SentinelOne — Contagious Interview: Plans and Operations sentinelone.com/labs/contagi… 8. ESET — DeceptiveDevelopment Targets Freelance Developers welivesecurity.com/en/eset-r… 9. ESET — From Primitive Crypto Theft to Sophisticated AI-Based Deception welivesecurity.com/en/eset-r… 10. Sekoia — From Contagious to ClickFake Interview sekoia.com/blog/clickfake-in… 11. Silent Push — Contagious Interview Front Companies silentpush.com/blog/contagio… 12. Socket — 35 New Malicious npm Packages socket.dev/blog/north-korean… 13. Socket — Contagious Interview Spreads Across Five Ecosystems socket.dev/blog/contagious-i… 14. Cisco Talos — Famous Chollima Deploying PylangGhost blog.talosintelligence.com/p… 15. Fireblocks — Disrupting a Recruiting Impersonation Scam fireblocks.com/blog/contagio… 16. Kudelski Security — How DPRK’s Contagious Interview Campaign Targets Developers kudelskisecurity.com/researc… 17. Microsoft — Malware Delivered Through Fake Developer Job Interviews microsoft.com/en-us/security… 18. Microsoft — Dissecting Sapphire Sleet’s macOS Intrusion microsoft.com/en-us/security… 19. FBI — North Korea Aggressively Targeting the Crypto Industry ic3.gov/PSA/2024/PSA240903 20. Joint Government Advisory — WaterPlum / Contagious Interview cyber.gov.au/advisory/north-…

maybe small regional banks -- big banks are definitely not in a worse position they are all interconnected and so even in the extremely unlikely case that you "hack" them, you're not getting that money out in size

⚡️ Binance reopened withdrawals after the $6.3B hack. Where did the money go? Binance: -$4.5B in 24h Next 10 exchanges combined: ~+$368M (OKX took most of it) ₿ Coinbase +984 $BTC, Kraken +1,422 $BTC Nearly 9 in 10 dollars leaving Binance didn’t land on a rival exchange.

‼️ BREAKING: Nvidia's Brev AI platform has been breached. Nvidia is telling users that unauthorised activity hit Brev from October 4 to 20 and that the SSH keys it set up for their VMs may have been exposed. Wiz counts at least nine other AI developer platforms hit this month.

JUST IN: THERE HAVE BEEN 24.4M COINS LAUNCHED ON PUMPFUN 312 ARE CURRENTLY ABOVE $100K MARKET CAP