Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Sekoia and Kudelski Security’s “Beyond Lazarus” report splits North Korea’s Lazarus Group into six clusters with different mandates, from TEMP.Hermit and CryptoCore to Moonstone Sleet and Famous Chollima. Host Tova Dvorin and SafeBreach’s Adrian Culley map the two agencies behind Pyongyang’s hacking, why a state unit used Qilin ransomware-as-a-service, how Kimsuky and Reaper differ, and three fixes: retire the composite Lazarus threat profile, test what a fake IT worker’s credentials can reach, and merge your APT and ransomware test plans.

Does GDPR require your LLM data to stay in the EU? No. GDPR doesn’t require personal data to stay in the EU, but you can only transfer it outside the EU with a valid mechanism, such as an adequacy decision or standard contractual clauses. Many European enterprises keep data in the EU anyway, partly because of the Schrems II ruling and partly because of ongoing uncertainty around the EU-US Data Privacy Framework.