A new cyber threat involves AI-generated fake job applicants who are sophisticated enough to pass multiple rounds of technical interviews with world-class engineers. These 'vaporware' people don't exist, forcing companies to mandate in-person onboarding to verify identities and prevent espionage or fraud.

A sophisticated threat involves state-sponsored actors from the DPRK using AI interview tools and virtual backgrounds to pass hiring processes. They get hired, receive company laptops, and then operate as insider threats, creating a significant and often undetected security risk for organizations.

In a major cyberattack, Chinese state-sponsored hackers bypassed Anthropic's safety measures on its Claude AI by using a clever deception. They prompted the AI as if they were cyber defenders conducting legitimate penetration tests, tricking the model into helping them execute a real espionage campaign.

The problem of fake job applicants has escalated from an HR nuisance to a national security issue. State actors, like North Korea, are weaponizing AI to submit thousands of applications for remote IT jobs to infiltrate corporate systems, forcing companies to treat recruitment screening as a security function.

Beyond typical IP theft, North Korea runs a program where state-backed operators secure remote tech jobs in Western companies. Their goal is not just espionage but also earning salaries to directly fund the regime, representing a unique and insidious state-sponsored threat.

North Korea's secret IT workforce bypasses security checks by paying Americans to act as "facilitators." These individuals host company-issued laptops in the US, allowing overseas workers to remote-in and appear as domestic employees, creating a critical vulnerability in remote hiring and IT security protocols.

CrowdStrike has found hundreds of North Korean state actors getting hired as remote developers at US companies to gain insider access and steal trade secrets. They are so effective that one manager asked if they had to fire the operative because "he did such good work," highlighting a severe remote work vulnerability.

CrowdStrike is seeing a rise in state-sponsored actors successfully passing job interviews to become remote employees. They are then shipped a company laptop, giving them complete, trusted access inside the corporate network, bypassing all perimeter defenses.

US officials and AI labs allege Chinese firms are engaged in industrial-scale IP theft. They reportedly use fraudulent accounts to extract capabilities from US models like Claude to train their own, creating a facade of domestic innovation.