보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-11-07 (Sat) Morning edition
Today's Top 10
-
Chainalysis Hack Exposes Account Data of All Customers
Blockchain analytics firm Chainalysis disclosed that an internal system breach exposed usernames, password hashes, and active tokens for all customers. The company first detected the breach on November 2 and temporarily suspended its Reactor investigation tool and Data Solutions services. In a November 6 update, it asked customers to register trusted IPs, reset passwords, and rotate API keys, while gradually restoring services.
BleepingComputer · Read original (opens in new window) ↗
-
Douzone Bizon Backup Server Hack Spreads to Over 14 Organizations
An external attacker breached Douzone Bizon's APO backup service server and exfiltrated some encrypted data. As a result, at least 14 client organizations—including the Nowon Culture Foundation, Jeonnam Information & Culture Industry Promotion Agency, and KAC Airport Service—have issued notices about possible exposure of personal data such as resident registration numbers and bank account numbers. Affected organizations are sequentially notifying users after being informed by Douzone Bizon.
-
AI Tax Solution 'Jarvis' Hacked, Payment Information Confirmed Leaked
Tax and accounting firm SV, which operates the AI service 'Jarvis', initially denied a phishing-related warning email as fraudulent but confirmed on November 6, after further investigation, that an actual unauthorized intrusion had occurred. The hacker is believed to have accessed the system between November 2 and 5, stealing customer personal information including accredited certificates and payment data. The operator immediately suspended the service and is investigating the breach with external experts.
-
Ransomware Group Claims Attack on Panax Group and Wookseong Chemical
The ransomware group 'Ink Ransom' claimed to have hacked the entire internal digital infrastructure of Busan-based fine chemical company Wookseong Chemical and its affiliate Panax Group. The claimed stolen data reportedly includes user and computer account information across six affiliate domains, internal network structures, SCADA access credentials, and contracts related to nuclear facilities. Copies of the CEO's ID and partner bank account numbers were also reportedly exposed.
-
DigiCert Data Breach Traced to Server Migration Error
Certificate authority DigiCert reported that an internal business system was exposed externally during a server migration, leading to unauthorized access to customer information and identity verification documents. An outsider reportedly used a self-registration feature to create an account and gained read-only access to stored customer data between June 27 and July 2. The exposed information included names, emails, and phone numbers, as well as identity documents such as driver's licenses and passports for some customers.
BleepingComputer · Read original (opens in new window) ↗
-
Multiple Hacking Claims Target Philippine Government Agencies, Probe Underway
On November 5, hacking claims simultaneously emerged targeting several Philippine government agencies, a national university, and a job portal. Hacker groups claimed to have stolen about 19.2 million records from the job portal PhilJobNet and 8 gigabytes of data from the Good Governance Commission. The National Privacy Commission stated on November 6 that no official breach reports had yet been filed and that it was still verifying the claims.
Newsbytes.ph · Read original (opens in new window) ↗
-
Remittance Firm Hanpass Hacked, Income and Foreign Registration Data Leaked
South Korean remittance company Hanpass suffered an external hacking attack in the early hours of November 1, resulting in the leak of customer personal information. The attack began around 4:38 a.m. and was detected about 5 hours and 22 minutes later, with sensitive data such as income certificates and foreign resident registration records confirmed exposed. The company reported the incident to the Personal Information Protection Commission, KISA, and the Financial Supervisory Service.
-
Etomato Hack Exploits Login Vulnerability, Leaks Member Data
Etomato, an investment information service affiliated with Newstomato, suffered a member data leak after attackers exploited a security vulnerability in its homepage login screen. Signs of attack were found in two separate incidents in July and September, which the company confirmed on November 3 and notified members about on November 6. The leaked information includes names, mobile phone numbers, email addresses, and home addresses.
-
Norway's Norad Hacked, Data of Over 20,000 People Exposed
A grant portal operated by Norway's development cooperation agency Norad was hacked, exposing the names and email addresses of 20,614 registered users. Those affected include personnel from roughly 12,500 organizations worldwide that applied for environmental and development grants, including applicants operating in conflict zones or authoritarian states. Authorities immediately shut down the portal and are in the process of notifying victims.
Help Net Security · Read original (opens in new window) ↗
-
French Bank Crédit Mutuel Arkéa Loses Roughly €100 Million in Cyberattack
French bank Crédit Mutuel Arkéa disclosed that an external hacker breach resulted in fraudulent transactions worth approximately €100 million (about $113 million). The attacker reportedly gained access to bank accounts through a third-party service provider, transferred funds to other financial institutions, and converted them into cryptocurrency. Customer assets were not affected, though some transfers were delayed, and Paris prosecutors' cybercrime division along with the national cybercrime agency have launched an investigation.
Yahoo Finance / Boursorama · Read original (opens in new window) ↗
Korea — Hacking News
-
Douzone Bizon Backup Server Hack Spreads to Over 14 Organizations
An external attacker breached Douzone Bizon's APO backup service server and exfiltrated some encrypted data. As a result, at least 14 client organizations—including the Nowon Culture Foundation, Jeonnam Information & Culture Industry Promotion Agency, and KAC Airport Service—have issued notices about possible exposure of personal data such as resident registration numbers and bank account numbers. Affected organizations are sequentially notifying users after being informed by Douzone Bizon.
-
AI Tax Solution 'Jarvis' Hacked, Payment Information Confirmed Leaked
Tax and accounting firm SV, which operates the AI service 'Jarvis', initially denied a phishing-related warning email as fraudulent but confirmed on November 6, after further investigation, that an actual unauthorized intrusion had occurred. The hacker is believed to have accessed the system between November 2 and 5, stealing customer personal information including accredited certificates and payment data. The operator immediately suspended the service and is investigating the breach with external experts.
-
Ransomware Group Claims Attack on Panax Group and Wookseong Chemical
The ransomware group 'Ink Ransom' claimed to have hacked the entire internal digital infrastructure of Busan-based fine chemical company Wookseong Chemical and its affiliate Panax Group. The claimed stolen data reportedly includes user and computer account information across six affiliate domains, internal network structures, SCADA access credentials, and contracts related to nuclear facilities. Copies of the CEO's ID and partner bank account numbers were also reportedly exposed.
-
Remittance Firm Hanpass Hacked, Income and Foreign Registration Data Leaked
South Korean remittance company Hanpass suffered an external hacking attack in the early hours of November 1, resulting in the leak of customer personal information. The attack began around 4:38 a.m. and was detected about 5 hours and 22 minutes later, with sensitive data such as income certificates and foreign resident registration records confirmed exposed. The company reported the incident to the Personal Information Protection Commission, KISA, and the Financial Supervisory Service.
-
Etomato Hack Exploits Login Vulnerability, Leaks Member Data
Etomato, an investment information service affiliated with Newstomato, suffered a member data leak after attackers exploited a security vulnerability in its homepage login screen. Signs of attack were found in two separate incidents in July and September, which the company confirmed on November 3 and notified members about on November 6. The leaked information includes names, mobile phone numbers, email addresses, and home addresses.
Global — Hacking News
-
Chainalysis Hack Exposes Account Data of All Customers
Blockchain analytics firm Chainalysis disclosed that an internal system breach exposed usernames, password hashes, and active tokens for all customers. The company first detected the breach on November 2 and temporarily suspended its Reactor investigation tool and Data Solutions services. In a November 6 update, it asked customers to register trusted IPs, reset passwords, and rotate API keys, while gradually restoring services.
BleepingComputer · Read original (opens in new window) ↗
-
DigiCert Data Breach Traced to Server Migration Error
Certificate authority DigiCert reported that an internal business system was exposed externally during a server migration, leading to unauthorized access to customer information and identity verification documents. An outsider reportedly used a self-registration feature to create an account and gained read-only access to stored customer data between June 27 and July 2. The exposed information included names, emails, and phone numbers, as well as identity documents such as driver's licenses and passports for some customers.
BleepingComputer · Read original (opens in new window) ↗
-
Multiple Hacking Claims Target Philippine Government Agencies, Probe Underway
On November 5, hacking claims simultaneously emerged targeting several Philippine government agencies, a national university, and a job portal. Hacker groups claimed to have stolen about 19.2 million records from the job portal PhilJobNet and 8 gigabytes of data from the Good Governance Commission. The National Privacy Commission stated on November 6 that no official breach reports had yet been filed and that it was still verifying the claims.
Newsbytes.ph · Read original (opens in new window) ↗
-
Norway's Norad Hacked, Data of Over 20,000 People Exposed
A grant portal operated by Norway's development cooperation agency Norad was hacked, exposing the names and email addresses of 20,614 registered users. Those affected include personnel from roughly 12,500 organizations worldwide that applied for environmental and development grants, including applicants operating in conflict zones or authoritarian states. Authorities immediately shut down the portal and are in the process of notifying victims.
Help Net Security · Read original (opens in new window) ↗
-
French Bank Crédit Mutuel Arkéa Loses Roughly €100 Million in Cyberattack
French bank Crédit Mutuel Arkéa disclosed that an external hacker breach resulted in fraudulent transactions worth approximately €100 million (about $113 million). The attacker reportedly gained access to bank accounts through a third-party service provider, transferred funds to other financial institutions, and converted them into cryptocurrency. Customer assets were not affected, though some transfers were delayed, and Paris prosecutors' cybercrime division along with the national cybercrime agency have launched an investigation.
Yahoo Finance / Boursorama · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.