US security firm unwittingly hired apparent "nation-state" hacker from North Korea
Briefly

First of all: No illegal access was gained, and no data was lost, compromised, or exfiltrated on any KnowBe4 systems. This is not a data breach notification, there was none. See it as an organizational learning moment I am sharing with you. If it can happen to us, it can happen to almost anyone. Don't let it happen to you.
KnowBe4 hired the North Korean hacker through its usual process. 'We posted the job, received resumes, conducted interviews, performed background checks, verified references, and hired the person. We sent them their Mac workstation, and the moment it was received, it immediately started to load malware,' the company said.
Read at Ars Technica
[
|
]