Tag: defense contractor
2 articles
Defense Contractor Exposes Military Training Data Through API Flaw
A defense contractor's careless API flaw left sensitive military training data vulnerable, sparking a 152-day saga between the contractor and the open-source security project Strix that ultimately led to the exposure being patched. The breach was caused by a low-privilege account having broad access to user records and training materials due to lax authorization checks.
US Pair Sentenced for Aiding North Korea in $5 Million IT Worker Scam
Two Americans have been sentenced to a combined 200 months in prison for their role in a four-year scam that funneled roughly $5 million to North Korea by targeting Fortune 500 companies and a US defense contractor with fraudulent IT worker schemes. The shocking case reveals how these individuals became unwitting accomplices to a foreign regime's lucrative deception.