North Korean fake IT workers are submitting up to 60 applications a day, and experts urge in-person verification of contractors
North Korean fake IT workers are submitting as many as 60 job applications a day, ITPro reported from new research. Interviews are where these candidates succeed, so identity checks at hiring belong on the security team's list.
Reality
- Evidence55
- Adoption35
- Hype gap+15
- Incentives50
- Confidence50
Netskope reports XWorm's plugin count rose from 35 in July 2025 to 46 in October 2026, adding GPS, microphone and browser-session plugins. Netskope says one of them hijacks logged-in sessions and bypasses MFA entirely.
Reality
- Evidence55
- Adoption55
- Hype gap+15
- Incentives45
- Confidence62
More than 60 enterprises, among them Salesforce and Cloudflare, already push $400 million of entertainment spending through Ande's agents. They report savings of 12% to 15% on it.
Perspective Coverage
3 publishers
- Builder
- Builder 20%
- Operator
- Operator 37%
- Investor
- Investor 43%
Reality
- Evidence35
- Adoption40
- Hype gap+30
- Incentives75
- Confidence55
Applications per job more than doubled while the number of recruiters fell 56%
Indeed's chief executive says the hiring process has become a vicious cycle. The figures his rival at Greenhouse cites put the missing capacity somewhere specific: the people paid to read what arrives.
Reality
- Evidence28
- Adoption33
- Hype gap+27
- Incentives78
- Confidence41
5,400 hacked WordPress and PrestaShop sites pull their ClickFix payload from a BNB testnet contract
The contract cannot be deleted. Every injected site has to reach a public BNB Smart Chain testnet RPC endpoint to read it. Netskope recommends blocking that pool. The payload has already changed once.
Reality
- Evidence52
- Adoption64
- Hype gap+14
- Incentives58
- Confidence55
JFrog adds semantic scanning of markdown, scripts and MCP servers to block malicious AI agent behavior
The company's swampUP 2026 release reads skills files and instruction sets for malicious behaviour and lets an organisation cut agents off from public registries at the network layer, which turns agent conduct into a procurement question.
Reality
- Evidence32
- Adoption24
- Hype gap+38
- Incentives78
- Confidence58