“P4x says he has largely automated his attacks on the North Korean systems, periodically running scripts that enumerate which systems remain online and then launching exploits to take them down.”
North Korean spies hacked a US security researcher, and the US government did nothing about it for a year. So one guy in pajama pants knocked a country offline with known, unpatched bugs. He calls it the size of a small to medium pentest. The hackers who hit him almost certainly work from China and never noticed.