Kibu-Quarterly-Threat-Report-Q1-2026.md

This Q1 2026 report warns that North Korean state-sponsored actors are using AI-enhanced social engineering to create synthetic "fake employees" who gain real remote positions, receive valid credentials, exfiltrate data, and funnel wages to fund the DPRK regime and WMD programs; it reviews historical DPRK cyber operations, cites indictments and loss estimates, analyzes why identity verification is a critical gap, and proposes human-backed identity verification (Kibu) as a mitigation.