NORTH KOREA-LINKED APT LAZARUS IS USING A MAGICLINE4NX ZERO-DAY FLAW IN SUPPLY CHAIN ATTACK

Summary from the TLDR InfoSec newsletter

The National Cyber Security Centre (NCSC) and Korea’s National Intelligence Service (NIS) issued a joint warning that North Korea-linked Lazarus hacking group is exploiting a zero-day vulnerability in the MagicLine4NX certificate management and signing software to carry out supply-chain attacks.