Threat actor
North Korea
Tracked by CyberSIXT since 27 Oct · RSS
1Articles, all time
1Articles, last 30 days
2CVEs exploited, attributed · all time
0Research reports, all time
Activity
Developinglatest 2 hours ago1 article1 outlet
One article so far, 27 Oct. A pattern appears once more outlets cover North Korea.
- Tue 27 Oct. Security Affairs. CISA adds exploited PHP flaws to its KEV catalogue. Cites a CVE in CISA KEV.
- Known exploited CVE
- Article naming North Korea
- Articles a day, all coverage
Drawn: the only article.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 27 Oct | Article | Security Affairs | CISA adds exploited PHP flaws to its KEV catalogue |
Connections
2 exploited CVEs. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2026-109619, CVE-2026-109618
- Affected vendors
- PHP Group
CVEs exploited2
CVEs an article attributes to North Korea, most covered first
- 9.2Critical99.9% EPSS · 46 articles
- 9.2Critical99.9% EPSS · 45 articles
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for North Korea.
Articles1
Drawn: the only article.
- CISA adds exploited PHP flaws to its KEV catalogueSecurity AffairsExploitedCVE-2026-109618