KR — 전자신문

[Photo] Financial Sector Grim After String of Security Incidents

SecurityNovember 5, 20261 min read

Leaders of South Korea's banking and financial industry met to discuss stronger security after a string of security incidents. This story is a photo report from the meeting.

A serious-faced meeting on security

On the 5th, Cho Yong-byung, head of the Korean Federation of Banks, sat deep in thought before a meeting in Yeouido, Seoul. The meeting was held at the Financial Security Institute. It brought together the whole financial sector to talk about a new security system for the AI era.

Why the mood is tense

Several security problems have hit financial companies in a short time. Banks and other financial firms store large amounts of personal and money data. If that data is not protected, it can be stolen or misused. The photo title says the industry looks stiff, which shows how worried people in the field are.

Why it matters

Banks and other financial firms are trusted with people's money and private information. When security fails, customers can lose money and trust. As AI tools grow, new kinds of attacks may also appear. The industry is looking for a new way to protect its systems.

Glossary

Korean Federation of Banks: A group of banks in South Korea that works together on shared issues and rules for the banking industry.
Financial Security Institute: A Korean group that supports security for banks and other financial companies.
AI era: A time when artificial intelligence (AI, computer systems that can learn and make decisions) is used widely in daily life and business.

Popular game NIKKE's official PC launcher reportedly used to run malicious program; scripts tampered with on CDN, users urged to take action

The NIKKE operations team said on November 5 that some script files of the PC launcher were tampered with by a third party, possibly causing a malicious program to run when the launcher started, and apologized. A security researcher reported the payload was a remote-access program called "K2F" that could steal passwords; the team fixed the launcher, blocked the additional distribution, and asks players who ran the Windows launcher since September 27 to run security checks, change passwords, and scan their PCs.

SecurityArs TechnicaNov 5

Hackers exploited iOS and Android flaws to infect phones

Hackers possibly linked to the Kremlin used previously patched iOS and Android flaws to attack visitors of multiple websites, including one marking the 250th anniversary of the US Constitution, researchers said. The attackers, assessed with moderate to high confidence as part of Russia's Foreign Intelligence Service, injected JavaScript that profiled devices and delivered payloads aimed at stealing browser cookies and, in some cases, Wi-Fi passwords and mobile device data. Impersonated sites included america250.org, which the attackers proxied through a lookalike domain.

SecurityThe RegisterNov 5

Apple turns iCloud into spy cloud, will start looking at public share links

Apple plans to scan publicly accessible iCloud share links, created with the "Anyone with the Link" option, for "harmful content," according to a support page published Tuesday. The company has not defined what counts as harmful, has not explained how the checks will work, and says it can remove content or involve law enforcement. The checks are slated to begin with iOS, iPadOS, macOS and visionOS 27.3, which is in developer beta with general release expected in December.

SecurityTechCrunchNov 5

Hackers stole DreamHost customer files and inboxes during months-long attack

Web host DreamHost confirmed that hackers stole customer emails and credentials during a months-long cyberattack that began in August. The company disclosed the breach after an outage lasting several days, during which it reset some customer passwords. DreamHost said attackers exploited an unspecified vulnerability in its file manager and obtained session tokens, and that the number of affected customers is "well under 10%."