Quishing and the Resurgence of BYOD Cyber-Attack Exposure

North Korean attackers’ latest efforts to target foreign policy experts via quishing expose long-standing bring-your-own-device vulnerabilities that U.S. organizations have failed to address. Socially engineered attacks will continually bypass identity verification and network perimeter security measures if personal mobile devices remain in the workflow. As with any mitigation strategy against social engineering attacks, quishing must be stopped at the entry point so that the QR codes used to spread malware and malicious URLs never reach employees in the first place.