Jobs, skills and pay · 21 recent stories
A Virginia defence contractor holding Top Secret clearance has pleaded guilty to lending his identity and home network to North Korean IT workers seeking U.S. employment. The case is part of a wider pattern of North Korean remote worker schemes that abuse legitimate hiring and access.
A federal judge dismissed a Department of Justice lawsuit seeking to block Democratic Senate candidate Mary Peltola from taking office, which was based on concern that independent candidate Daniel J. Sullivan would confuse voters with incumbent Dan S. Sullivan. Judge Sharon Gleason found the government had not shown how its requested relief could work without breaching ballot secrecy, and said the executive branch has no legitimate role in Alaska's ballot decisions.
In a Help Net Security interview, KloudStax CTO Vinay Thakker advises that AI coding agents run under their own identity, with the user's identity attached when acting on their behalf. He also discusses common credential proxy mistakes, what a basic command policy should contain, and how to prevent data exfiltration via package installation.
A Computer Weekly Downtime podcast episode features Brian McKenna and Paul Roehrig, chief strategy officer at Ascendion, discussing AI education. The conversation emphasises critical thinking, curiosity and human judgement as key skills alongside AI use.
According to a Wall Street Journal report cited by KnowBe4, romance scammers are persuading US citizens to act as money mules, moving illicit funds on behalf of criminal groups. The example given is Garrick Stafford, a 50-year-old Texan who lost $65,000 and laundered $50,000 after months of texting with a scammer. He initially blocked the scammer when she first asked for money, but later unblocked her and resumed contact.
Troy Hunt's weekly update reflects on a manifesto from Proton's CEO arguing that developers now help LLMs write code rather than writing it themselves. Hunt partly agrees with the view that the enthusiasm around the technology is justified, while criticising the manager's tone. The article contains no vulnerability, breach or security finding.
Proton CEO Andy Yen cancelled near company-wide 're-interviews' that would have required staff to explain their AI use, after 404 Media reported on aggressive AI adoption that overrode security concerns. The investigation cited employee accounts of a fear-based culture, an AI manifesto from CTO Bart Butler, and a Slack exchange in which Yen dismissed a request to pentest new code before release. Yen said the push to use AI would continue and that the re-interview measures would feed into performance reviews.