North Korean IT workers pay Americans to appear on camera and keep work laptops online
FBI says North Korean IT workers increasingly depend on witting and unwitting Americans to win jobs at U.S. companies. The bureau says no single indicator catches them, so employers have to weigh several signals together.
Publishers:ic3.gov
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Japan tells companies to patch and harden logins after a Times Car leak exposed 6.6 million accounts
Japan's government told ministries, local authorities and companies to patch known flaws and tighten supplier security after 20-plus firms disclosed attacks. For operators the practical items are supplier maps, contractor logins and how long ID images are kept.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
More than 20 major Japanese companies have disclosed cyberattacks in recent weeks, the Financial Times reported. Tokyo's instructions to ministries and companies are basic. The recent cases put operators' exposure in their vendors and their ID handling.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+30
- Incentives35
- Confidence55
Denmark says hackers used a Danish company's search access to the Central Person Register to reach names, addresses and ID numbers of 8.8 million people. Because that access is a service offered to businesses by design, every partner account with search rights is part of the register's security perimeter.
Perspective Coverage
15 publishers
- Builder
- Builder 24%
- Operator
- Operator 67%
- Investor
- Investor 9%
Reality
- Evidence74
- Adoption
- Not scored
- Hype gap+12
- Incentives30
- Confidence70
Green Dot Bank will require identity verification for every Apple Cash reload from November 9, a check that until now applied only past $500 in total activity. The change reaches occasional users who never crossed that line and have never been asked for ID.
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence75
buildOne report1 publisher Cloudflare's new fraud dashboard judges each account against its own login history
Cloudflare launched an Early Access fraud dashboard built on per-account login and signup histories, arguing AI-faked identities now beat one-time checks. How much it catches depends on how much of a site's login traffic Cloudflare's edge actually sees.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives80
- Confidence50
Pindrop's survey of more than 250 US security leaders found 74% faced or suspected a deepfake attack in the past year. The targets are live channels such as help-desk calls, job interviews and video meetings, and identity controls were not designed to verify who is on them.
Reality
- Evidence40
- Adoption10
- Hype gap+25
- Incentives
- Not scored
- Confidence45
LinkedIn lets verified company pages hide impersonator accounts from search
LinkedIn now lets admins of verified Company Pages remove known impersonator accounts from search results under the company name. Companies that have not verified their page cannot use it, so fake-employee cleanup on LinkedIn starts with whoever controls that page.
Reality
- Evidence40
- Adoption20
- Hype gap+5
- Incentives65
- Confidence50
Socure's round prices a 63% grower at roughly 14 times ARR, and the agentic investigation platform it bought sells an 80% cut in cost per case, which is a promise to deflate the budget it is sold into.
Perspective Coverage
4 publishers
- Builder
- Builder 21%
- Operator
- Operator 36%
- Investor
- Investor 43%
Reality
- Evidence58
- Adoption62
- Hype gap+25
- Incentives70
- Confidence60
Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 56%
- Investor
- Investor 18%
Reality
- Evidence62
- Adoption66
- Hype gap+22
- Incentives50
- Confidence60
Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.
Perspective Coverage
7 publishers
- Builder
- Builder 23%
- Operator
- Operator 49%
- Investor
- Investor 28%
Reality
- Evidence62
- Adoption65
- Hype gap+15
- Incentives55
- Confidence60
IDScan.net says an unauthorized third party may have accessed or copied full names and government-issued ID numbers from customer accounts on its cloud, after 153 million driver's licenses appeared for sale on a dark web site.
Perspective Coverage
5 publishers
- Builder
- Builder 17%
- Operator
- Operator 65%
- Investor
- Investor 18%
Reality
- Evidence68
- Adoption70
- Hype gap+28
- Incentives60
- Confidence64
LinkedIn hands resume checking to your old colleagues and your employer's page admin
The new vouching and brand-control tools give the checking work to colleagues who have known you for a year and to page admins clicking through profiles one at a time. LinkedIn says 115 million members are already verified.
Reality
- Evidence58
- Adoption45
- Hype gap+25
- Incentives72
- Confidence60
Papaya Global's case for AI workforce infrastructure rests on its own country counts
Market researchers put the workforce that labels data and reviews model outputs at about 3 million today and heading toward 35 million. The licence and enforcement counts Papaya presented to analysts are the company's own tally.
Reality
- Evidence45
- Adoption32
- Hype gap+30
- Incentives78
- Confidence45
Polymarket's signup flow treated a stolen SSN as a password
According to the Wall Street Journal, nearly 500 Polymarket US accounts were entered by people who typed in someone else's Social Security number. The flow's duplicate-identity check opened the account it matched instead of blocking the attempt.
Reality
- Evidence55
- Adoption72
- Hype gap−15
- Incentives70
- Confidence55
Candidate fraud lands on recruiters while InfoSec, IT and legal stay out of the interview loop
A hiring podcast argues that state-backed operations now train workers to apply for remote jobs with stolen credentials and proxy interviewers. The guest making the case works for the vendor selling the fix.
Reality
- Evidence20
- Adoption
- Not scored
- Hype gap+55
- Incentives85
- Confidence58
HYPR's September 15 survey of 500 US HR executives puts average unmonitored access for a fraudulent hire at 5.73 days, and the report's own detection figures undercut its chief executive's line about human intuition.
Reality
- Evidence34
- Adoption26
- Hype gap+38
- Incentives84
- Confidence52
A 20-app dating network sold coins so 25,000 people could message 4,700 AI personas
Anthropic's investigation counted 2.36 million messages over two weeks in April 2026. The operators put paid humans on video calls and let a second AI model draft their lines, so the face on the call and the words in the chat came from different places.
Reality
- Evidence44
- Adoption63
- Hype gap+6
- Incentives55
- Confidence52
buildOne report1 publisher Footprint raises $25M for compliance agents that log a citation and a timestamp per step
QED led the round and MUFG joined as one of four new investors. Under Trust Fabric, a human reviewer has to approve a finding before later investigations can reuse it.
Reality
- Evidence48
- Adoption30
- Hype gap+27
- Incentives72
- Confidence55
buildOne report1 publisher An ICCID column is what makes the unverified Claro list worth acting on
A forum post on 13 September claimed 2,889,256 Claro Dominicana customer records, each carrying the serial number of the line's SIM. Nobody has verified it, and the SIM serial is the field that should drive the response.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+14
- Incentives25
- Confidence40