تُرجمت هذه الصفحة وتم التحقق منها آليًا. النسخة الإنجليزية هي المرجع.بعض الأجزاء لا تزال بالإنجليزية ريثما يتم التحقق من ترجمتها.عرض بالإنجليزية · الإبلاغ عن خطأ في الترجمة
North‑Korean actors are using fabricated identities to infiltrate U.S. and European enterprises, turning hiring processes into an attack vector. The threat highlights the need for stronger identity governance and continuous monitoring of insider activity to satisfy audit and control‑assurance requirements.
ADTP Breach Watch· November 7, 2026· DataBreachToday
الخطورةمرتفع
النوع👤 Threat intel
Confidenceمرتفع
تاريخ الإبلاغNov 7, 2026
Other / UnknownEnterprise organizations across technology, finance, healthcare, manufacturing, and professional servicesInsider
ما الذي حدث
A coordinated North‑Korean campaign creates false résumés and forged identities to pass background checks and secure legitimate employment at large enterprises. Once inside, these trojan employees blend malicious actions—such as data exfiltration, privilege escalation, and sabotage—with normal work behavior, making detection difficult for traditional security tools that focus on known bad artifacts. The campaign demonstrates how insider risk can arise from both malicious intent and well‑meaning mistakes, emphasizing the challenge of distinguishing benign from harmful activity when the user already has trusted access.
لماذا يهم ذلك للثقة والامتثال
Organizations must tighten identity governance, enforce least‑privilege principles, and continuously monitor user behavior to provide defensible evidence of insider‑risk controls across frameworks.
Map onboarding and role‑based access policies to VCF control objectives for identity governance.
Collect continuous user‑behavior analytics as audit evidence for insider‑risk controls.
Who is affected
Enterprise organizations across technology, finance, healthcare, manufacturing, and professional services
Recommended actions
Implement role‑based least‑privilege access and schedule periodic access‑right reviews.
Deploy UEBA solutions to detect anomalous insider activity.
Enhance background‑check processes with supplemental identity‑verification services.
مكتبة التشريعات
جميع قوانين الخصوصية في الولايات الأمريكية على خريطة واحدة
لدى 24 ولاية قانون شامل للخصوصية في المكتبة، إلى جانب قوانين الاتحاد الأوروبي والمملكة المتحدة والقوانين الاتحادية الأمريكية والقوانين العالمية: 102 قانونًا إجمالًا، كل منها مشروح بلغة واضحة مع مصادره. اختر ولاية لمعرفة ما يسري فيها.