Storm Watch | Cyber Podcast | The Untold Stories: North Korean Hacks, Exploited Vulnerabilities & Cybersecurity Legends
Summary: An Arizona woman, Christian Marie Chapman, faces federal prison time for running a "laptop farm" that let North Korean IT workers pose as U.S.-based employees, an operation that generated over $17 million for North Korea and funneled money to its weapons programs. The episode also covers GreyNoise's findings on active exploitation of an authentication bypass in Palo Alto Networks PAN-OS (CVE-2025-0108) that lets attackers execute unauthorized PHP scripts, alongside exploitation surges in ThinkPHP and ownCloud and Censys' argument against weakening encryption standards.
Why it matters: A single laptop farm turned remote IT hiring into a $17 million funding channel for North Korea's weapons programs, which means the identity checks behind your remote roles are now part of that supply chain.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-0108
- Related
- CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Feb 18, 2025Grey Noise Observes Active Exploitation of PAN-OS Authentication Bypass Vulnerability (CVE-2025-0108) Cyber Risks ·Noise Letter February 2025 Cyber Risks ·