Headlines
Security News
Headlines on personal-data breaches, technology leaks, and security incidents from public Korean, Japanese, and international RSS feeds.
Full articles are not republished. Korean and Japanese headlines are shown in English, with the original title underneath.
- New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and…
Read original (new window) - From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know…
Read original (new window) - Chainalysis discloses data breach from "offensive agentic techniques"
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal…
Read original (new window) - Chuncheon Cultural Foundation, official notice of possible personal information leakage 춘천문화재단, 개인정보 유출 가능성 공식 공지
더존비즈온의 백업서비스 침해사고 여파가 공공 문화기관으로 확대되고 있다. 춘천문화재단이 더존비즈온의 외부 백업서버 침해사고와 관련해 개인정보 유출 가능성을 공식 안내하고 피해 여부를 확인 중인 것으로 나타났다.춘천문화재단은 10월 30일 공식…
Read original (new window) - VT Cosmetics hacked… Leakage of personal information of customers, retired employees, and business partners, including resident registration number and account information 브이티코스메틱 해킹…고객·퇴직 임직원·거래처 개인정보 유출, 주민번호·계좌정보도 포함
화장품 브랜드 브이티코스메틱(VT Cosmetics)에서 해킹으로 고객과 과거 임직원, 개인사업자 거래처의 개인정보가 유출되는 사고가 발생했다. 유출 정보에는 고객 주문·배송정보뿐 아니라 주민등록번호와 계좌번호 등도 포함됐다.브이티코스메틱은 10월…
Read original (new window) - Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed…
Read original (new window) - Ministry of Internal Affairs and Communications requests and reports on communications companies to “block” GMO attacker sites 総務省、GMO攻撃者サイトの「ブロッキング」を通信各社に要請 報道
総務省が10月27日付で、GMOインターネットへの不正アクセス問題を巡り、攻撃者のものとみられるWebサイトの「ブロッキング」を通信事業者に要請していたことが、朝日新聞や読売新聞などの報道で分かった。
Read original (new window) - [Exclusive] KLPGA officially announces impact of Douzone Bizon hacking… Investigating the possibility of member personal information being leaked [단독] KLPGA, 더존비즈온 해킹 영향 공식 공지…회원 개인정보 유출 가능성 조사
한국여자프로골프협회(KLPGA)가 더존비즈온의 백업서비스 침해사고로 회원들의 개인정보가 유출됐을 가능성이 있다고 공식 공지했다. 유출 가능성이 있는 정보에는 성명과 주민등록번호, 주소 등이 포함돼 있어 실제 유출 여부와 영향 범위에 대한 조사가…
Read original (new window) - Jaewon Food, personal information of executives and franchisees may be leaked in the aftermath of Douzone Bizon hacking 재원푸드, 더존비즈온 해킹 여파로 임직원·가맹점주 개인정보 유출 가능성
식품기업 재원푸드가 더존비즈온 백업서비스 침해사고로 임직원과 점주의 개인정보가 유출됐을 가능성이 있다고 공식 공지했다. 유출 가능성이 있는 정보에는 성명과 생년월일, 연락처, 계좌번호 등이 포함돼 있으며, 정확한 피해 대상과 실제 유출 여부는 아직…
Read original (new window) - Possibility of personal information of executives and employees being leaked in the aftermath of the hacking of WithUdo Douzone Bizon, a major telecommunications company affiliate. 대형 통신사 관계사 위드유도 더존비즈온 해킹 여파로 임직원 개인정보 유출 가능성
국내 대형 통신사 관계사 위드유가 더존비즈온의 백업서비스 침해사고로 임직원 개인정보가 유출됐을 가능성이 있다고 공식 안내했다. 유출 가능성이 있는 정보에는 이름과 전화번호, 계좌정보 등이 포함돼 있으며, 실제 개인정보 유출 여부와 피해 인원은 아직…
Read original (new window) - Petdoc is also affected by the Douzone Bizon hacking… Possibility of leakage of personal information of former Hairu employees and business partners 펫닥도 더존비즈온 해킹 영향…옛 하이루 직원·거래처 개인정보 유출 가능성
반려동물 서비스 기업 펫닥이 더존비즈온의 백업서버 침해사고로 과거 합병한 기업의 임직원과 거래처 개인정보가 유출됐을 가능성이 있다고 공식 공지했다. 유출 가능성이 있는 정보에는 주민등록번호와 계좌번호가 포함돼 있으며, 현재 실제 유출 여부와 피해…
Read original (new window) - Bentley official dealer Charmzone Automotive, possibility of customer personal information leaked… Aftermath of Douzone Bizon hacking 벤틀리 공식 딜러 참존오토모티브, 고객 개인정보 유출 가능성…더존비즈온 해킹 여파
참존오토모티브가 회계·백업서비스 제공업체인 더존비즈온의 서버 침해사고로 고객 개인정보가 유출됐을 가능성이 있다고 공식 공지했다. 더존비즈온의 백업서버에 외부 공격자가 불법 접근해 암호화된 데이터 일부를 반출한 것으로 확인되면서 관련 서비스를…
Read original (new window) - Changbi Education officially confirms the impact of Douzone Bizon hacking... Possibility of leakage of author and business partner information 창비교육, 더존비즈온 해킹 영향 공식 확인…저자·거래처 정보 유출 가능성
교육출판기업 창비교육이 더존비즈온의 백업서비스 침해사고로 저자와 거래처 관계자의 개인정보가 유출됐을 가능성이 있다고 공식 공지했다. 앞서 출판사 창비에 이어 창비교육도 개인정보 유출 가능성을 알리면서 더존비즈온 해킹 사고의 영향 범위가 추가로…
Read original (new window) - U.S. FBI begins official investigation into ‘8.4 trillion won’ Binance hacking… Trump: “We are watching whether North Korea was responsible” 美 FBI, ‘8.4조원’ 바이낸스 해킹 공식 수사 돌입... 트럼프 “北 소행 여부 주시 중”
세계 최대 가상자산 거래소 바이낸스(Binance)에서 발생한 63억달러(한화 약 8조4000억원) 규모의 역대급 해킹 사건에 대해 미국 연방수사국(FBI)이 공식 수사에 돌입했다. 도널드 트럼프 미국 대통령 역시 사태를 예의주시하고 있다고…
Read original (new window) - ‘Non’, the most damaging ransomware to Korean companies, spent 10 million won per month on AI alone for attacks 한국 기업 최다 타격 랜섬웨어 ‘논’, 공격 위한 AI에만 월 1000만원 썼다
신생 랜섬웨어 조직 ‘논’(N0n)이 올해 누적 기준 한국 기업을 가장 많이 공격한 것으로 집계됐다. 자동화된 랜섬웨어 공격을 위해 AI에만 1000만원에 달하는 비용을 들인 것으로 확인됐다. 논 랜섬웨어는 전 세계에서 가장 많은 공격을 시도한…
Read original (new window) - Hacking 30 seconds after receiving a call... Telegram Android calling defect remains for over 4 years 전화 받고 30초 뒤 해킹... 텔레그램 안드로이드 통화 결함 4년 넘게 남아
안드로이드용 텔레그램에서 걸려 온 음성통화를 받기만 해도 공격자가 휴대폰에서 코드를 실행할 수 있는 결함이 공개됐다. 보안 스타트업 네뷰섹(NebuSec)은 29일(현지시각) 이 결함을 공개했다. 공격자에게 필요한 것은 평범한 텔레그램 계정…
Read original (new window) - Money Today, confirmed that 1,367 pieces of personal information were leaked due to hacking in September 머니투데이, 9월 해킹으로 개인정보 1367건 유출 확인
머니투데이가 지난 9월 25일 발생한 해킹으로 1367건의 개인정보가 유출됐다고 공지했다.최초로 외부 불법 접근이 확인된 것은 지난 9월 25일 13시경이다. 당시 머니투데이는 외부로부터의 불법 접근 시도로 인해 개인정보 유출을 확인하고, 즉시…
Read original (new window) - Railway, possibility of customer API key leak... Hacker's ultimate goal is 'AI inference service' 레일웨이, 고객 API 키 유출 가능성…해커 최종 목표는 'AI 추론 서비스'
클라우드 애플리케이션 배포 플랫폼 레일웨이(Railway)에서 고객의 중요 인증정보가 외부에 노출됐을 가능성이 확인됐다. 공격자가 암호화된 환경 변수에 무단 접근하고 일부 정보를 복호화했을 가능성이 제기된 가운데 레일웨이는 이번 침해가…
Read original (new window) - ‘Hyundai Easywell’, a welfare point shopping mall used by 3.4 million people, had personal information leaked through hacking 340만명 사용 복지포인트 쇼핑몰 ‘현대이지웰’, 해킹으로 개인정보 유출
복지포인트 쇼핑몰로 잘 알려진 현대이지웰이 해킹으로 회원정보가 유출됐다. 유출된 항목은 △이름 △생년월일 △성별 △휴대폰번호 △이메일 △주소 등이다.현대이지웰은 10월 29일 21시경 회원정보 조회 API에 외부의 비정상적인 접근이 발생했으며,…
Read original (new window) - From license plate enlargement to IP tracking... Forensic investigation in dramas, asked experts 번호판 확대부터 IP 추적까지... 드라마 속 과학수사, 전문가에게 물었다
클릭 한 번에 선명해지는 CCTV 영상 속 번호판, 케이블을 꽂자마자 거짓말처럼 풀리는 스마트폰 잠금. 영화와 드라마 속 과학수사는 늘 빠르고 완벽하다. 하지만 실제 수사 현장의 기술은 암호화와 법적 절차, 인프라와 개인정보 보호라는 현실의 벽…
Read original (new window) - Approximately 1 trillion yen leaked from Binance, was the North Korean hacker group “TraderTraitor” responsible? Binanceの約1兆円流出、北朝鮮ハッカー集団「TraderTraitor」の犯行か
Binanceから約60億ドルの暗号資産が流出した事件で、TRM LabsとChainalysisは北朝鮮のサイバー集団「TraderTraitor」の関与を指摘した。過去最大規模の被害に対し、盗難資産の分散洗浄が進む一方、当局や発行元による迅速な資産凍結も進められている。
Read original (new window) - Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated…
Read original (new window) - Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing…
Read original (new window) - WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were…
Read original (new window) - SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes,…
Read original (new window) - CISA says max severity GitLab flaw now exploited in the wild
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity…
Read original (new window) - Attacks on sites related to the Electricity and Gas Trading Surveillance Commission - Ministry of Economy, Trade and Industry 電力・ガス取引監視等委員会の関連サイトに攻撃 - 経産省
経済産業省は、電力・ガス取引監視等委員会のウェブサイトが不正アクセスを受けたことを明らかにした。サイトを停止し、調査を行っている。
Read original (new window) - Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in…
Read original (new window) - App management system compromised, member information leaked - Matsuya アプリの管理システムが侵害、会員情報流出 - 松屋
松屋フーズと松屋フーズホールディングスは、第三者による侵害を受け、会員情報が流出したことを明らかにした。
Read original (new window) - Drupal warns of critical Commerce Core flaw exploited in attacks
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the…
Read original (new window) - Circumstances in which 150 Korean passports were distributed on an illegal hacking forum... All sensitive information was exposed 불법 해킹 포럼서 한국인 여권 150개 유포 정황... 민감정보 통째로 노출
불법 해킹 포럼에서 한국인 여권 150개를 탈취했다는 주장이 나왔다. 30일 불법 해킹 포럼 ‘다크포럼스’(Darkforums)에서 활동하는 ‘알트자이언트’(ALTGIANT)라는 닉네임의 사용자가 23일 이 포럼 사이트에서 한국인 여권 150개를…
Read original (new window) - Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's…
Read original (new window) - Multiple vulnerabilities including command execution in Yamaha router “NWR100” ヤマハ製ルータ「NWR100」にコマンド実行など複数脆弱性
ヤマハの無線LANルータ「NWR100」に複数の脆弱性が判明した。任意のOSコマンドを実行されたり、設定情報が漏洩するおそれがあり、同社はファームウェアの修正版を公開している。
Read original (new window) - Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability,…
Read original (new window) - CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software…
Read original (new window) - Unauthorized access to Matsuya app, approximately 2.38 million pieces of personal information leaked, plans to compensate for suspension 松屋のアプリに不正アクセス、約238万件の個人情報が漏えい 停止中の補償も予定
松屋フーズホールディングスは10月30日、公式アプリの管理システムへの不正アクセスで、約238万件の個人情報が漏えいしたと発表した。アプリ会員には、サービス停止期間中の補償をする予定という。
Read original (new window) - Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets.…
Read original (new window) - Information leaks somewhere today, 53rd “Information Leak in September 2026” Video of the century captured by camera at the moment of information leak 今日もどこかで情報漏えい 第53回「2026年9月の情報漏えい」カメラが情報漏えいの瞬間を捉えた世紀の映像 Read original (new window)
- Unauthorized login using Gunosy internal business account credentials, leaking information on business partners, executives, employees, etc. Gunosy の社内業務用アカウントの認証情報を用いた不正ログイン、取引先や役員・従業員等の情報が流出 Read original (new window)
- Unauthorized access to So-net member database, 2,141,986 member information leaked So-net 会員データベースに不正アクセス、会員情報214万1,986件が漏えい Read original (new window)
- Special gratuity of up to 3 million yen will be given to customers whose information was disclosed due to unauthorized access to “Onanae.com Desktop Cloud” 「お名前.com デスクトップクラウド」に不正アクセス、情報が公開された顧客に上限300万円の特別見舞金 Read original (new window)
- Ticket purchase service “GETTIIS” member information leaked externally due to unauthorized access 不正アクセスでチケット購入サービス「GETTIIS」会員情報が外部流出 Read original (new window)
- Ransomware attack on Entouch, which operates remote detailing business, etc. リモートディテーリング事業等を行うエンタッチにランサムウェア攻撃 Read original (new window)
- Unauthorized access to Nifty's line application/reception management system affected up to 542,513 member information ニフティの回線申込・受付管理システムに不正アクセス、最大54万2,513件の会員情報に影響 Read original (new window)
- Unauthorized access to Second Retailing セカンドリテイリングに不正アクセス Read original (new window)
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting…
Read original (new window) - Possibility of employee personal information being leaked - Doutor Coffee 従業員の個人情報が流出した可能性 - ドトールコーヒー
コーヒーショップチェーンを運営するドトールコーヒーは、システムから従業員の個人情報が流出した可能性があることを明らかにした。
Read original (new window) - E-gifts are illegally issued due to unauthorized access - Gifty 不正アクセスで電子ギフトが不正発行 - ギフティ
ギフティグループは、電子ギフトを展開する子会社のギフティが不正アクセスを受けたことを明らかにした。電子ギフトが不正に発行され、被害額は約5億円を超えるという。
Read original (new window) - Unauthorized access to ANA reservation information, evidence of private information being peeped through the same contractor as JAL ANAの予約情報に不正アクセス、JALと同じ委託先経由で 個人情報をのぞき見た痕跡も
全日本空輸（ANA）は10月29日、Amadeusが提供する旅客サービスシステムへの不正アクセスで、一部顧客の個人情報を第三者が参照した形跡があると発表した。同じシステムを使う日本航空も28日、約9万2000人分の予約情報への不正アクセスを公表している。
Read original (new window) - Matsuya's official app and website are down, unauthorized access detected, and mobile ordering and bento reservations are unavailable. 松屋の公式アプリとWebサイトが停止 不正アクセスを検知、モバイルオーダーや弁当予約も使えず
牛丼チェーン「松屋」を運営する松屋フーズは10月29日までに、外部からの不正アクセスを検知したとして、公式アプリやWebサイトを停止していると発表した。原因と影響範囲を調べており、復旧の見通しは改めて知らせるとしている。
Read original (new window) - Unauthorized access to Benefit One contractor, leaking personal information of approximately 29,000 people through preferential services for Saison members ベネフィット・ワンの委託先に不正アクセス セゾン会員向け優待サービスで約2.9万人分の個人情報漏えい
ベネフィット・ワンは10月28日、業務委託先のシステムへの不正アクセスで、クレディセゾン会員向け優待サービス「トク買」の会員2万9465人分の個人情報が漏えいしたと発表した。クレジットカード情報の漏えいはないという。
Read original (new window) - GMO is in turmoil, is President Kumagai's message “fuel on the fire”? , the merits and demerits of ``top management's own PR'' 渦中のGMO、熊谷代表の発信は“火に油”か？ 「経営トップが自ら広報」の功罪
不正アクセス騒動と同時に物議を醸す、GMOインターネットグループ・熊谷正寿代表による発信。危機管理広報の観点からその妥当性を考える。
Read original (new window) - GMO offers 150 million yen bounty for clues to perpetrators of unauthorized access GMO、不正アクセス実行犯の手がかりに懸賞金 1億5000万円規模
GMOインターネットグループが、傘下のGMOインターネットが提供するFX自動売買用VPS「お名前.com デスクトップクラウド」への不正アクセスを巡り、事態を解明する情報に総額100万ドル（約1億5000万円）の報奨金を支払う懸賞金制度を始めると発表した。
Read original (new window) - Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified…
Read original (new window) - Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.…
Read original (new window) - FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection…
Read original (new window) - ShinyHunters Extorted Boeing Spin-off Prior to Arrests
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is…
Read original (new window) - Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by…
Read original (new window) - U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata…
Read original (new window) - Data Broker Radaris Loses Domains in Privacy Fight
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire…
Read original (new window)
Sources