North Korean APT Targets South Korean Media With New Linux Tool

🕵️ RESEARCH & DEEP DIVES

• Likely North Korean APT Targets South Korean Media, Automotive With New Linux Tool
  A likely North Korean APT used a previously undocumented Linux espionage toolkit to target South Korean media and automotive organizations.

  • Targets are organizations in South Korea's media and automotive sectors.
  • A likely North Korean APT used a previously undocumented Linux espionage toolkit in the operation.
  • The toolkit compromised load balancers to gain access to communications.
  • Attackers used the foothold to further exploit targeted networks.
  Sources 📎 Coverage: darkreading.com · 👁 via Dark Reading

• ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen serve... — CVE ThreatInt

• Authentication Bypass via SAML Response ManipulationUnder certain conditions ... — CVE ThreatInt

• Reflected Cross-Site ScriptingAn attacker can craft a malicious link that, if... — CVE ThreatInt

• Cryptographic Padding OracleAn unauthenticated user with access to Secret Ser... — CVE ThreatInt

• Security Advisory 0160On affected platforms running Arista EOS with IS-IS gra... — CVE ThreatInt

• Security Advisory 0160On affected platforms running Arista EOS with IS-IS con... — CVE ThreatInt

• Podman: arbitrary file write when importing oci archiveA flaw was found in Po... — CVE ThreatInt

• Gimp: integer overflow when generating a thumbnail preview for a psd fileA fl... — CVE ThreatInt

• Microsoft Edge UAF Privilege Escalation (CVE-2026-85893) — thehackerwire.com (discovered)

• Mostaql Security Breach: Hackers Infiltrate Search Engine via Community Forum Server — thehackerwire.com (discovered)

• Exaforce Extends Cybersecurity Reach to Create AI Agent Kill Switch — securityboulevard.com (discovered)