North Korean hackers linked to defense sector supply-chain attack

Germany's BfV and South Korea's NIS warn of active North Korean cyber‑espionage against the global defense sector, detailing a 2022 supply‑chain compromise of a web‑server maintenance provider that enabled SSH credential theft, lateral movement, web shells and attempted malicious patch distribution, plus social‑engineering campaigns (Operation Dream Job) used to deliver backdoors like LightlessCan; the advisory lists TTPs and recommends limiting third‑party access, enforcing MFA and least privilege, hardening patch management, monitoring logs, and employee training.