#workers’

From Fake Workers to Account Recovery: The Growing Identity Verification Risk

Aug 25, 2026 // 17:57

Security teams have spent years hardening authentication, with controls like multi-factor authentication (MFA) and conditional access now commonplace. While stronger authentication can make traditional credential […]

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Aug 19, 2026 // 23:59

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in […]

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Aug 19, 2026 // 23:58

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in […]

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

Aug 13, 2026 // 14:46

Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They apply for jobs, pass […]

The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In

Aug 12, 2026 // 17:17

For many security teams, the expected route into the corporate network begins with a phishing email or exploited vulnerability. Certain techniques differ, exploiting the hiring […]

The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In

Aug 12, 2026 // 17:17

For many security teams, the expected route into the corporate network begins with a phishing email or exploited vulnerability. Certain techniques differ, exploiting the hiring […]

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

Aug 11, 2026 // 17:30

Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued […]

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Jul 20, 2026 // 00:22

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with […]

North Korean IT Workers Evade Sanctions, Funding WMDs via Remote Work Schemes.

Mar 20, 2026 // 14:03

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has imposed sanctions on six people and two organizations involved in a North Korean IT […]

DPRK IT Workers’ Fake Jobs Fund WMDs: OFAC Sanctions Network.

Mar 18, 2026 // 21:36

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has imposed sanctions on six people and two organizations for their participation in North Korea’s […]