보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-11-02 (Mon) Morning edition
Today's Top 10
-
Binance Hacked for $6.3 Billion, North Korea Confirmed Behind Attack
On October 29, 2026, Binance suffered a hack resulting in the theft of approximately $6.3 billion worth of cryptocurrency. Chainalysis analysis and the FBI identified the North Korea-linked hacking group TraderTraitor as responsible, with some stolen assets mixed in real time with funds from the earlier Bitget hack to launder them. About $2.8 billion has been frozen to date.
-
Daishin Securities, Mirae Asset Life Among Financial Firms Hit by Successive Hacks
Despite emergency security inspections by financial regulators, hacking incidents and personal data breaches continued to occur at financial investment and insurance firms including Daishin Securities and Mirae Asset Life. Experts pointed out that the current oversight system remains limited to formal checks, such as collecting security pledges from outsourced personnel or filling out annual inspection checklists. This was contrasted unfavorably with the U.S. Federal Reserve's guidelines for continuous monitoring of high-risk third-party vendors.
ZDNet Korea · Read original (opens in new window) ↗
-
RSUPPORT's 'RemoteCall' Hacked, Customer Information Leaked
Remote support solution provider RSUPPORT suffered unauthorized access to its 'RemoteCall' SaaS operations site, leaking client company names, administrator contact details, and agent email addresses. The breach was belatedly discovered through anomalous activity on an internal developer's PC, after which the company blocked the access path and reported the incident to KISA. End users' personal information and remote support data were reportedly not affected.
-
Japanese Digital Securities Custody Platform Hacked, Investor Data Leaked
A digital securities custody service operated by Japan's NTT Data suffered unauthorized access, raising the possibility that bond purchaser information from multiple financial firms, including Rakuten Securities and Kintetsu Group Holdings, was exfiltrated. At Credit Saison, a security flaw in an external authentication feature on a separate platform was exploited, confirming a leak of personal information for 1,889 real estate digital securities investors. The incident demonstrated how vulnerabilities in custody platforms handling securities issuance and distribution can spread damage across multiple financial institutions.
-
Hacking Group Using Generative AI Breached 90+ Firms, Leaked 8.2 Million Records
Police arrested a hacking group that used generative AI to attack more than 90 companies over 44 days, stealing 8.2 million personal data records. The suspects reportedly used AI tools for everything from vulnerability scanning to writing attack code, and demanded a total of 360 million won from 38 of the victim companies using the leaked data as leverage. The damage spread to small businesses with limited security staff, such as private academies and clinics, raising calls for a coordinated response system.
-
GS E&C Apartment Community System Hacked, Resident Data Leaked
An unauthorized access incident affecting the facility reservation management system for apartment communities operated by GS E&C resulted in the leak of residents' personal information, including names, dates of birth, phone numbers, and RF card numbers. The company blocked the external IP addresses and reported the incident to authorities immediately upon discovery, noting that resident registration numbers and financial information were not collected. However, the leak of RF card numbers linked to building access has raised security concerns beyond personal data exposure, extending to residential facility security.
-
Chainalysis Breached via Agentic AI Attack
Blockchain analytics firm Chainalysis disclosed that attackers using 'offensive agentic techniques' breached its internal systems, leaking user IDs, names, email addresses, and organizational role information. The company stated that no evidence was found of access to investigative data, authentication credentials, or session tokens. The full scope of the breach is still under investigation, and customers have been advised to enable two-factor authentication and remain cautious of suspicious password reset requests.
BleepingComputer · Read original (opens in new window) ↗
-
CISA Issues Urgent Alert on Two Ivanti Connect Secure Vulnerabilities
The U.S. CISA added an authentication bypass vulnerability (CVE-2026-111357) and a predictable identifier generation vulnerability (CVE-2026-118527) in Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog based on confirmed exploitation in the wild. Combined with the previously disclosed CVE-2026-104935, the two flaws form an attack chain enabling unauthenticated, root-level code execution. CISA ordered federal agencies to apply patches by November 2 and November 13, respectively.
-
FBI Names North Korea's 'TraderTraitor' Behind Binance's $6.3 Billion Hack
The FBI identified North Korea's state-sponsored hacking group TraderTraitor as responsible for the Binance cryptocurrency exchange hack that occurred on October 29. The hack resulted in the theft of $6.3 billion in digital assets, making it the largest cryptocurrency theft on record. Binance stated it has already covered 90% of the losses using its own funds and will make up the remainder.
NBC News · Read original (opens in new window) ↗
-
Changbi Publishers Warns of Possible Author and Vendor Data Leak from Douzone Bizon Hack
Publisher Changbi announced that personal information belonging to authors and business partners may have been leaked due to a breach of a backup server operated by accounting software provider Douzone Bizon. The company stated that the leaked data was encrypted and that no signs of encryption key compromise were found. The fallout from the Douzone Bizon hack has continued to spread to other client organizations, including hospitals and telecom affiliates.
Korea — Hacking News
-
Daishin Securities, Mirae Asset Life Among Financial Firms Hit by Successive Hacks
Despite emergency security inspections by financial regulators, hacking incidents and personal data breaches continued to occur at financial investment and insurance firms including Daishin Securities and Mirae Asset Life. Experts pointed out that the current oversight system remains limited to formal checks, such as collecting security pledges from outsourced personnel or filling out annual inspection checklists. This was contrasted unfavorably with the U.S. Federal Reserve's guidelines for continuous monitoring of high-risk third-party vendors.
ZDNet Korea · Read original (opens in new window) ↗
-
RSUPPORT's 'RemoteCall' Hacked, Customer Information Leaked
Remote support solution provider RSUPPORT suffered unauthorized access to its 'RemoteCall' SaaS operations site, leaking client company names, administrator contact details, and agent email addresses. The breach was belatedly discovered through anomalous activity on an internal developer's PC, after which the company blocked the access path and reported the incident to KISA. End users' personal information and remote support data were reportedly not affected.
-
Hacking Group Using Generative AI Breached 90+ Firms, Leaked 8.2 Million Records
Police arrested a hacking group that used generative AI to attack more than 90 companies over 44 days, stealing 8.2 million personal data records. The suspects reportedly used AI tools for everything from vulnerability scanning to writing attack code, and demanded a total of 360 million won from 38 of the victim companies using the leaked data as leverage. The damage spread to small businesses with limited security staff, such as private academies and clinics, raising calls for a coordinated response system.
-
GS E&C Apartment Community System Hacked, Resident Data Leaked
An unauthorized access incident affecting the facility reservation management system for apartment communities operated by GS E&C resulted in the leak of residents' personal information, including names, dates of birth, phone numbers, and RF card numbers. The company blocked the external IP addresses and reported the incident to authorities immediately upon discovery, noting that resident registration numbers and financial information were not collected. However, the leak of RF card numbers linked to building access has raised security concerns beyond personal data exposure, extending to residential facility security.
-
Changbi Publishers Warns of Possible Author and Vendor Data Leak from Douzone Bizon Hack
Publisher Changbi announced that personal information belonging to authors and business partners may have been leaked due to a breach of a backup server operated by accounting software provider Douzone Bizon. The company stated that the leaked data was encrypted and that no signs of encryption key compromise were found. The fallout from the Douzone Bizon hack has continued to spread to other client organizations, including hospitals and telecom affiliates.
Global — Hacking News
-
Binance Hacked for $6.3 Billion, North Korea Confirmed Behind Attack
On October 29, 2026, Binance suffered a hack resulting in the theft of approximately $6.3 billion worth of cryptocurrency. Chainalysis analysis and the FBI identified the North Korea-linked hacking group TraderTraitor as responsible, with some stolen assets mixed in real time with funds from the earlier Bitget hack to launder them. About $2.8 billion has been frozen to date.
-
Japanese Digital Securities Custody Platform Hacked, Investor Data Leaked
A digital securities custody service operated by Japan's NTT Data suffered unauthorized access, raising the possibility that bond purchaser information from multiple financial firms, including Rakuten Securities and Kintetsu Group Holdings, was exfiltrated. At Credit Saison, a security flaw in an external authentication feature on a separate platform was exploited, confirming a leak of personal information for 1,889 real estate digital securities investors. The incident demonstrated how vulnerabilities in custody platforms handling securities issuance and distribution can spread damage across multiple financial institutions.
-
Chainalysis Breached via Agentic AI Attack
Blockchain analytics firm Chainalysis disclosed that attackers using 'offensive agentic techniques' breached its internal systems, leaking user IDs, names, email addresses, and organizational role information. The company stated that no evidence was found of access to investigative data, authentication credentials, or session tokens. The full scope of the breach is still under investigation, and customers have been advised to enable two-factor authentication and remain cautious of suspicious password reset requests.
BleepingComputer · Read original (opens in new window) ↗
-
CISA Issues Urgent Alert on Two Ivanti Connect Secure Vulnerabilities
The U.S. CISA added an authentication bypass vulnerability (CVE-2026-111357) and a predictable identifier generation vulnerability (CVE-2026-118527) in Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog based on confirmed exploitation in the wild. Combined with the previously disclosed CVE-2026-104935, the two flaws form an attack chain enabling unauthenticated, root-level code execution. CISA ordered federal agencies to apply patches by November 2 and November 13, respectively.
-
FBI Names North Korea's 'TraderTraitor' Behind Binance's $6.3 Billion Hack
The FBI identified North Korea's state-sponsored hacking group TraderTraitor as responsible for the Binance cryptocurrency exchange hack that occurred on October 29. The hack resulted in the theft of $6.3 billion in digital assets, making it the largest cryptocurrency theft on record. Binance stated it has already covered 90% of the losses using its own funds and will make up the remainder.
NBC News · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.