보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-11-01 (Sun) Morning edition
Today's Top 10
-
Binance Hacked for $6.3 Billion, North Korea Blamed
Binance, the world's largest crypto exchange, was hacked and lost roughly $6.3 billion worth of crypto assets. Blockchain analytics firms attributed the attack to a North Korea-linked hacking group, and the FBI has opened a formal investigation. About half of the stolen assets were reportedly frozen as they moved across multiple blockchains.
-
Douzone Bizon Backup Server Breach Affects 110,000 Companies
Douzone Bizon, South Korea's top enterprise software provider, reported two breach incidents in which a vulnerability in a backup solution vendor was exploited, resulting in some encrypted data being exfiltrated. As a result, partner companies and medical institutions including Changbi Education, Partsnshop Automotive, Petdoc, and Asan/Cheonan Chungmu Hospital have successively announced possible exposure of personal information. South Korea's Ministry of Science and ICT formed a joint public-private investigation team to probe the scope and cause of the damage.
-
Amadeus Reservation System Hacked, Over 90,000 JAL Passengers Exposed
Global travel reservation system provider Amadeus suffered unauthorized access that exposed booking information of about 92,000 Japan Airlines passengers, with some records including passport numbers. South Korea's Korean Air and Asiana Airlines were also notified of a breach by the same vendor, raising concerns of wider fallout across the airline industry.
-
VT Cosmetics Hacked, Resident Registration Numbers and Bank Details Leaked
Cosmetics brand VT Cosmetics was hit by a hacking attack that leaked personal information of customers, former employees, and business partners. The leaked data reportedly included order and shipping information as well as sensitive data such as resident registration numbers and bank account details.
-
Hyundai E-Well Exposes Membership Data of 3.4 Million Users
An external party gained abnormal access to a member information lookup API at Hyundai E-Well, operator of a corporate welfare points shopping mall, leaking personal data including names, dates of birth, gender, phone numbers, and email addresses. The company blocked the IP addresses used in the attack, reported the incident to the Financial Supervisory Service and the Korea Internet & Security Agency, and pledged full compensation for any damages.
-
Chainalysis Discloses Breach Using 'AI Agent' Techniques
Blockchain analytics firm Chainalysis disclosed that an attacker breached its internal systems using so-called 'AI agent' techniques. Some customer data, including names, email addresses, user IDs, and organizational role information, was exposed, but the company said there was no evidence of leaked sensitive investigative data or credentials.
BleepingComputer · Read original (opens in new window) ↗
-
Three Chained Ivanti Zero-Days Let Attackers Gain Root Even on Patched Devices
An unidentified threat actor chained three Ivanti Connect Secure zero-day vulnerabilities to gain unauthenticated root access, including on devices that had already been patched. Patches have been released for two of the flaws, but the privilege escalation vulnerability remains unpatched, prompting CISA to recommend urgent action.
The Hacker News · Read original (opens in new window) ↗
-
Railway Breach Attempts to Steal API Keys Targeting AI Inference Services
Cloud platform Railway detected suspicious access to a system storing customer environment variables and temporarily suspended deployments. The attacker is believed to have attempted to steal API keys from AI model providers to cheaply clone and extract other models, potentially affecting secrets across up to 100,000 workspaces.
The Hacker News · Read original (opens in new window) ↗
-
MoneyToday Hacked, Newsletter Subscriber Information Leaked
South Korean media outlet MoneyToday said unauthorized external access in September leaked personal information of 1,367 newsletter and policy academy applicants. The leaked data included names, phone numbers, emails, and company names, but account and payment information of general and VIP members was not affected.
-
'Nun' Ransomware Hits Most South Korean Firms, Spends $7,500/Month on AI
The ransomware group 'Nun,' first identified last month, emerged as the ransomware group that attacked the most South Korean companies in a single month, with 93 victim organizations. The group reportedly invested nearly 10 million won (about $7,500) per month in AI tools alone to improve attack efficiency.
Korea — Hacking News
-
Douzone Bizon Backup Server Breach Affects 110,000 Companies
Douzone Bizon, South Korea's top enterprise software provider, reported two breach incidents in which a vulnerability in a backup solution vendor was exploited, resulting in some encrypted data being exfiltrated. As a result, partner companies and medical institutions including Changbi Education, Partsnshop Automotive, Petdoc, and Asan/Cheonan Chungmu Hospital have successively announced possible exposure of personal information. South Korea's Ministry of Science and ICT formed a joint public-private investigation team to probe the scope and cause of the damage.
-
VT Cosmetics Hacked, Resident Registration Numbers and Bank Details Leaked
Cosmetics brand VT Cosmetics was hit by a hacking attack that leaked personal information of customers, former employees, and business partners. The leaked data reportedly included order and shipping information as well as sensitive data such as resident registration numbers and bank account details.
-
Hyundai E-Well Exposes Membership Data of 3.4 Million Users
An external party gained abnormal access to a member information lookup API at Hyundai E-Well, operator of a corporate welfare points shopping mall, leaking personal data including names, dates of birth, gender, phone numbers, and email addresses. The company blocked the IP addresses used in the attack, reported the incident to the Financial Supervisory Service and the Korea Internet & Security Agency, and pledged full compensation for any damages.
-
MoneyToday Hacked, Newsletter Subscriber Information Leaked
South Korean media outlet MoneyToday said unauthorized external access in September leaked personal information of 1,367 newsletter and policy academy applicants. The leaked data included names, phone numbers, emails, and company names, but account and payment information of general and VIP members was not affected.
-
'Nun' Ransomware Hits Most South Korean Firms, Spends $7,500/Month on AI
The ransomware group 'Nun,' first identified last month, emerged as the ransomware group that attacked the most South Korean companies in a single month, with 93 victim organizations. The group reportedly invested nearly 10 million won (about $7,500) per month in AI tools alone to improve attack efficiency.
Global — Hacking News
-
Binance Hacked for $6.3 Billion, North Korea Blamed
Binance, the world's largest crypto exchange, was hacked and lost roughly $6.3 billion worth of crypto assets. Blockchain analytics firms attributed the attack to a North Korea-linked hacking group, and the FBI has opened a formal investigation. About half of the stolen assets were reportedly frozen as they moved across multiple blockchains.
-
Amadeus Reservation System Hacked, Over 90,000 JAL Passengers Exposed
Global travel reservation system provider Amadeus suffered unauthorized access that exposed booking information of about 92,000 Japan Airlines passengers, with some records including passport numbers. South Korea's Korean Air and Asiana Airlines were also notified of a breach by the same vendor, raising concerns of wider fallout across the airline industry.
-
Chainalysis Discloses Breach Using 'AI Agent' Techniques
Blockchain analytics firm Chainalysis disclosed that an attacker breached its internal systems using so-called 'AI agent' techniques. Some customer data, including names, email addresses, user IDs, and organizational role information, was exposed, but the company said there was no evidence of leaked sensitive investigative data or credentials.
BleepingComputer · Read original (opens in new window) ↗
-
Three Chained Ivanti Zero-Days Let Attackers Gain Root Even on Patched Devices
An unidentified threat actor chained three Ivanti Connect Secure zero-day vulnerabilities to gain unauthenticated root access, including on devices that had already been patched. Patches have been released for two of the flaws, but the privilege escalation vulnerability remains unpatched, prompting CISA to recommend urgent action.
The Hacker News · Read original (opens in new window) ↗
-
Railway Breach Attempts to Steal API Keys Targeting AI Inference Services
Cloud platform Railway detected suspicious access to a system storing customer environment variables and temporarily suspended deployments. The attacker is believed to have attempted to steal API keys from AI model providers to cheaply clone and extract other models, potentially affecting secrets across up to 100,000 workspaces.
The Hacker News · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.