보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-10-30 (Fri) Morning edition
Today's Top 10
-
Bithumb groupware hack leaks customer personal data
Bithumb, South Korea's second-largest crypto exchange, confirmed that an unauthorized external party accessed its internal mobile groupware 'Dawoo Office,' leaking personal data of both employees and customers. The company said trading systems use a physically separated network so customer assets were unaffected, and it reported the incident to KISA and the Personal Information Protection Commission.
-
Amadeus hack spreads to Asian airlines including JAL and ANA
A breach of aviation IT firm Amadeus's reservation system exposed booking numbers and passport numbers of about 92,000 Japan Airlines (JAL) customers, with All Nippon Airways (ANA) confirming similar damage. The same vulnerability had earlier caused data leaks at Korean Air and Asiana Airlines, raising concerns the breach could spread to roughly 200 airlines worldwide.
BleepingComputer · Read original (opens in new window) ↗
-
MyRealTrip hack leaks users' passport numbers
Travel platform MyRealTrip confirmed that abnormal external access led to the leak of users' names, contact details, and dates of birth, as well as passport numbers and expiration dates for some users. The company said payment information and booking records were not exposed, and it warned users to watch for smishing and voice phishing attempts.
-
Daishin Securities leaks data of 38,490 customers
Daishin Securities said abnormal access to a server linked to its non-face-to-face account opening process led to the leak of 38,490 customers' names, emails, and account numbers. The Financial Supervisory Service launched an on-site inspection immediately after the incident and is expanding its probe across the financial sector, including Bithumb and Mirae Asset Global Investments.
-
Sony's Japanese ISP So-net hacked, 2.58 million records leaked
Sony Network Communications disclosed that about 2.58 million member records from its subsidiary internet services 'So-net' and 'Plala' were leaked, with roughly 54,000 of them including email passwords. Attackers breached the member database on October 19, but the company did not detect the intrusion until October 23.
SecurityWeek · Read original (opens in new window) ↗
-
SK Planet's Gifticon service suffers personal data leak
SK Planet said it detected and blocked abnormal external access to its mobile coupon service Gifticon. The information suspected to be leaked includes names, phone numbers, and emails, along with purchased coupon serial numbers and refund account details, and the company is investigating the full scope of the damage.
-
Data of over 41,000 US DHS employees leaked
A hacker calling itself 'Peace Department' posted on the dark web names, work emails, job titles, and system access information for about 41,000 employees of US Department of Homeland Security units including CBP and ICE. The hacker claimed the data was stolen via the Okta-linked login system employees use, but Okta denied any evidence its systems were breached.
SecurityWeek · Read original (opens in new window) ↗
-
GiftL (Spoon) hack disrupts Lotte-affiliated coupon services
Spoon, operator of mobile gift certificate service GiftL, was hacked, leaking names, phone numbers, and refund account details of 18,359 customers. The breach disrupted mobile coupon use at 24 brands including Lotteria and Angel-in-us Coffee that use the service, and the company announced compensation measures such as extending coupon validity periods.
-
Cisco firewall SSL VPN zero-day actively exploited
Cisco disclosed a zero-day vulnerability in the remote-access SSL VPN feature of its ASA and FTD firewalls that allows unauthenticated attackers to force device reboots, and said it is being actively exploited. About 51,000 exposed devices were found worldwide, marking the second such exploited vulnerability following one disclosed in August this year.
The Hacker News · Read original (opens in new window) ↗
-
China-linked Volt Typhoon used covert network to exploit four zero-days
China-linked hacking group Volt Typhoon was found to have exploited four zero-day vulnerabilities in network equipment from vendors including Versa, N-able, Cisco, and Arista through a covert relay network called 'Silent Train.' The attackers routed traffic through multiple devices to evade tracking.
The Hacker News · Read original (opens in new window) ↗
Korea — Hacking News
-
Bithumb groupware hack leaks customer personal data
Bithumb, South Korea's second-largest crypto exchange, confirmed that an unauthorized external party accessed its internal mobile groupware 'Dawoo Office,' leaking personal data of both employees and customers. The company said trading systems use a physically separated network so customer assets were unaffected, and it reported the incident to KISA and the Personal Information Protection Commission.
-
MyRealTrip hack leaks users' passport numbers
Travel platform MyRealTrip confirmed that abnormal external access led to the leak of users' names, contact details, and dates of birth, as well as passport numbers and expiration dates for some users. The company said payment information and booking records were not exposed, and it warned users to watch for smishing and voice phishing attempts.
-
Daishin Securities leaks data of 38,490 customers
Daishin Securities said abnormal access to a server linked to its non-face-to-face account opening process led to the leak of 38,490 customers' names, emails, and account numbers. The Financial Supervisory Service launched an on-site inspection immediately after the incident and is expanding its probe across the financial sector, including Bithumb and Mirae Asset Global Investments.
-
SK Planet's Gifticon service suffers personal data leak
SK Planet said it detected and blocked abnormal external access to its mobile coupon service Gifticon. The information suspected to be leaked includes names, phone numbers, and emails, along with purchased coupon serial numbers and refund account details, and the company is investigating the full scope of the damage.
-
GiftL (Spoon) hack disrupts Lotte-affiliated coupon services
Spoon, operator of mobile gift certificate service GiftL, was hacked, leaking names, phone numbers, and refund account details of 18,359 customers. The breach disrupted mobile coupon use at 24 brands including Lotteria and Angel-in-us Coffee that use the service, and the company announced compensation measures such as extending coupon validity periods.
Global — Hacking News
-
Amadeus hack spreads to Asian airlines including JAL and ANA
A breach of aviation IT firm Amadeus's reservation system exposed booking numbers and passport numbers of about 92,000 Japan Airlines (JAL) customers, with All Nippon Airways (ANA) confirming similar damage. The same vulnerability had earlier caused data leaks at Korean Air and Asiana Airlines, raising concerns the breach could spread to roughly 200 airlines worldwide.
BleepingComputer · Read original (opens in new window) ↗
-
Sony's Japanese ISP So-net hacked, 2.58 million records leaked
Sony Network Communications disclosed that about 2.58 million member records from its subsidiary internet services 'So-net' and 'Plala' were leaked, with roughly 54,000 of them including email passwords. Attackers breached the member database on October 19, but the company did not detect the intrusion until October 23.
SecurityWeek · Read original (opens in new window) ↗
-
Data of over 41,000 US DHS employees leaked
A hacker calling itself 'Peace Department' posted on the dark web names, work emails, job titles, and system access information for about 41,000 employees of US Department of Homeland Security units including CBP and ICE. The hacker claimed the data was stolen via the Okta-linked login system employees use, but Okta denied any evidence its systems were breached.
SecurityWeek · Read original (opens in new window) ↗
-
Cisco firewall SSL VPN zero-day actively exploited
Cisco disclosed a zero-day vulnerability in the remote-access SSL VPN feature of its ASA and FTD firewalls that allows unauthenticated attackers to force device reboots, and said it is being actively exploited. About 51,000 exposed devices were found worldwide, marking the second such exploited vulnerability following one disclosed in August this year.
The Hacker News · Read original (opens in new window) ↗
-
China-linked Volt Typhoon used covert network to exploit four zero-days
China-linked hacking group Volt Typhoon was found to have exploited four zero-day vulnerabilities in network equipment from vendors including Versa, N-able, Cisco, and Arista through a covert relay network called 'Silent Train.' The attackers routed traffic through multiple devices to evade tracking.
The Hacker News · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.