보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-11-05 (Thu) Morning edition
Today's Top 10
-
Douzone Bizon Hack Fallout: 14 Partner Firms Report Personal Data Leaks
ERP vendor Douzone Bizon reported two separate server breaches last month, with evidence pointing to hijacked employee VPN accounts and data exfiltration via a backup solution vulnerability. At least 14 companies and institutions, including Theborn Korea, K Auction, and the Kukkiwon, have disclosed potential exposure of personal data such as resident registration numbers and bank account details, with the damage extending even to clients whose service contracts had already ended.
-
Hanyang Securities Customer Data Leaked via Hacked External Groupware
Hanyang Securities confirmed that a hack targeting an external groupware solution led to the leak of some personal data belonging to customers and employees. Exposed items included resident registration numbers, bank account numbers, driver's license numbers, and addresses; the company has since blocked access and completed emergency security patches.
-
China-Linked Hacking Group Uses AI Agents to Hit 14 Countries Simultaneously
Security firm CrowdStrike reported that China-linked threat group VAPOR PANDA used an AI agent framework called Artex, built on DeepSeek, to attack over 200 targets across 14-plus countries over 11 days, including foreign ministries and semiconductor, pharmaceutical, and defense firms. The attackers reportedly intervened only at critical decision points while AI handled the rest of the operation autonomously.
-
Second Cyberattack on European Supermarket Refrigeration Forces Mass Food Disposal
Internet-connected refrigeration and freezer units at supermarkets across Sweden, Belgium, Luxembourg, Ireland, and Estonia were hacked, causing temperatures to spike as high as 50 degrees Celsius. Stores were forced to dispose of large quantities of spoiled food in what marks the second such attack, following a similar incident targeting French stores a month earlier.
-
US Education Software Firm Hack Exposes Personal Data of 1.3 Million People
US education administration software company Frontline Education suffered a breach exploiting a third-party software vulnerability, exposing personal data including Social Security and passport numbers. According to disclosures filed with state authorities, at least 1.3 million people across a minimum of five states were affected.
-
Hosting Provider DreamHost Exposes Account Credentials in Two-Month Breach
Web hosting provider DreamHost allowed attacker access for two months through a vulnerability in its file manager platform, resulting in the theft of customers' FTP/SFTP account credentials and passwords. Some customers' webmail session data may also have been exposed, though less than 10% of the total customer base was affected.
TechCrunch · Read original (opens in new window) ↗
-
Seoul Childcare Support Center Discloses Leak Tied to Douzone Backup Server Breach
The Seoul Childcare Support Center disclosed potential exposure of personal data belonging to current and former staff and instructors, linked to the Douzone Bizon backup server breach. Items at risk include names, contact details, addresses, resident registration numbers, and bank account information, with the incident estimated to have occurred on the 18th of last month.
-
Personal Data of 30,000 Leaked from Seoul Volunteer Platform
Poor management practices at a volunteer platform operated under contract for the city of Seoul led to the leak of personal data belonging to 30,000 volunteers. The Seoul Metropolitan Council criticized broad gaps in the city's overall personal data protection management system.
-
Passport Numbers of President and Spouse Exposed Online for 5 Months
Personal data, including passport numbers and dates of birth, for 168 people on an overseas presidential trip in June was found exposed on malware analysis platform VirusTotal for five months. The Ministry of Foreign Affairs determined the leak stemmed from an internal handling error rather than external hacking, and is pursuing follow-up measures including passport reissuance for those affected.
-
Synology Warns of C3RB3R Ransomware Attacks Targeting NAS Devices
Synology warned of a surge in C3RB3R ransomware attacks targeting older NAS devices that have not applied a patch issued in December 2024. Attackers encrypt files, appending the '.L0CK3D' extension, and demand payment for decryption; the company urges immediate updates and blocking external access to the management web interface.
BleepingComputer · Read original (opens in new window) ↗
Korea — Hacking News
-
Douzone Bizon Hack Fallout: 14 Partner Firms Report Personal Data Leaks
ERP vendor Douzone Bizon reported two separate server breaches last month, with evidence pointing to hijacked employee VPN accounts and data exfiltration via a backup solution vulnerability. At least 14 companies and institutions, including Theborn Korea, K Auction, and the Kukkiwon, have disclosed potential exposure of personal data such as resident registration numbers and bank account details, with the damage extending even to clients whose service contracts had already ended.
-
Hanyang Securities Customer Data Leaked via Hacked External Groupware
Hanyang Securities confirmed that a hack targeting an external groupware solution led to the leak of some personal data belonging to customers and employees. Exposed items included resident registration numbers, bank account numbers, driver's license numbers, and addresses; the company has since blocked access and completed emergency security patches.
-
Seoul Childcare Support Center Discloses Leak Tied to Douzone Backup Server Breach
The Seoul Childcare Support Center disclosed potential exposure of personal data belonging to current and former staff and instructors, linked to the Douzone Bizon backup server breach. Items at risk include names, contact details, addresses, resident registration numbers, and bank account information, with the incident estimated to have occurred on the 18th of last month.
-
Personal Data of 30,000 Leaked from Seoul Volunteer Platform
Poor management practices at a volunteer platform operated under contract for the city of Seoul led to the leak of personal data belonging to 30,000 volunteers. The Seoul Metropolitan Council criticized broad gaps in the city's overall personal data protection management system.
-
Passport Numbers of President and Spouse Exposed Online for 5 Months
Personal data, including passport numbers and dates of birth, for 168 people on an overseas presidential trip in June was found exposed on malware analysis platform VirusTotal for five months. The Ministry of Foreign Affairs determined the leak stemmed from an internal handling error rather than external hacking, and is pursuing follow-up measures including passport reissuance for those affected.
Global — Hacking News
-
China-Linked Hacking Group Uses AI Agents to Hit 14 Countries Simultaneously
Security firm CrowdStrike reported that China-linked threat group VAPOR PANDA used an AI agent framework called Artex, built on DeepSeek, to attack over 200 targets across 14-plus countries over 11 days, including foreign ministries and semiconductor, pharmaceutical, and defense firms. The attackers reportedly intervened only at critical decision points while AI handled the rest of the operation autonomously.
-
Second Cyberattack on European Supermarket Refrigeration Forces Mass Food Disposal
Internet-connected refrigeration and freezer units at supermarkets across Sweden, Belgium, Luxembourg, Ireland, and Estonia were hacked, causing temperatures to spike as high as 50 degrees Celsius. Stores were forced to dispose of large quantities of spoiled food in what marks the second such attack, following a similar incident targeting French stores a month earlier.
-
US Education Software Firm Hack Exposes Personal Data of 1.3 Million People
US education administration software company Frontline Education suffered a breach exploiting a third-party software vulnerability, exposing personal data including Social Security and passport numbers. According to disclosures filed with state authorities, at least 1.3 million people across a minimum of five states were affected.
-
Hosting Provider DreamHost Exposes Account Credentials in Two-Month Breach
Web hosting provider DreamHost allowed attacker access for two months through a vulnerability in its file manager platform, resulting in the theft of customers' FTP/SFTP account credentials and passwords. Some customers' webmail session data may also have been exposed, though less than 10% of the total customer base was affected.
TechCrunch · Read original (opens in new window) ↗
-
Synology Warns of C3RB3R Ransomware Attacks Targeting NAS Devices
Synology warned of a surge in C3RB3R ransomware attacks targeting older NAS devices that have not applied a patch issued in December 2024. Attackers encrypt files, appending the '.L0CK3D' extension, and demand payment for decryption; the company urges immediate updates and blocking external access to the management web interface.
BleepingComputer · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.