Cyber Security Headlines North Korean IT workers move into Europe, Stripe API skimming unveils theft techniques, Verizon API flaw exposes call history
Apr 3, 2025
The podcast dives into the expanding presence of North Korean IT workers in Europe, highlighting significant cybersecurity threats. It also reveals new techniques in a Stripe API skimming campaign, showing how deceitful tech can evolve. Furthermore, a vulnerability in Verizon's API is discussed, exposing users' call history and raising privacy concerns. In addition, the conversation touches on Europol's takedown of a child exploitation network, outlining the fight against such criminal operations and the emerging risks posed by AI-based threats.
AI Snips
Chapters
Transcript
Episode notes
North Korean IT Workers in Europe
- North Korean IT workers are infiltrating European companies using fake identities to get remote jobs.
- They generate revenue for the DPRK regime via platforms like Upwork and Telegram, using cryptocurrency.
Mitigating API Skimming
- Implement real-time monitoring and secure iframe solutions.
- These measures can mitigate the risks of API skimming attacks on e-commerce platforms.
Stripe API Skimming Attack
- A new skimming attack uses the Stripe API.
- Cybercriminals inject malicious JavaScript into e-commerce checkout pages to steal payment information, exploiting the legitimate Stripe API.