The United Kingdom and South Korea recently released a joint advisory warning of a surge in software supply chain attacks by North Korean (DPRK) state-linked threat actors. The increased frequency and sophistication of such attacks carried out by North Korean-linked hackers is what prompted the creation of the joint advisory, with Korea’s National Intelligence Service (NIS) and Britian’s National Cyber Security Centre (NCSC) announcing a new strategic partnership between the nations’ governments aimed at bolstering increased security measures that disrupt and deter DPRK malicious cyber capabilities and the associated activities that contribute to their nuclear missiles program. This advisory comes just as the North Korean-linked hackers tracked as Diamond Sleet were associated to another supply chain attack that targeted downstream customers via a trojanized version of a legitimate software application produced by the Taiwanese software developers CyberLink. As outlined in the joint advisory, and consistent with the latest DPRK-associated attack, the threat actors involved in the surge of attacks have been observed leveraging zero-day vulnerabilities and exploits in third-party software to gain access to specific targets or an entire organization via their supply chains. The agencies mentioned that the attacks align with known North Korean state aligned priorities like “revenue generation and espionage, with the theft of advanced technologies across a range of sectors, including but not limited to defense.” Along with CyberLink, other recent noteworthy attacks include 3CX, MagicLine4NX, and JumpCloud.