KR — 전자신문

Securion's 'OnAV' Achieves 100% Malicious App Detection Rate, 39th AV-TEST Certification

SecurityOctober 28, 20261 min read

Securion, a South Korean mobile security company, says its Android antivirus app OnAV scored a 100% detection rate in a test by AV-TEST. It is the app's 39th certification from the testing group.

What happened

Securion said that its Android antivirus app, OnAV (Onvaccine in Korean), earned its 39th certification from AV-TEST, a global group that tests security products. In this round, OnAV caught 100% of malicious apps and scored 17 out of 18 points. The company also said it is working on tools to stop phishing scams, which are fake messages that trick people into giving up personal information.

Key numbers

Malicious app detection rate: 100%
Test score: 17 out of 18 points
Total AV-TEST certifications for OnAV: 39

How OnAV works

OnAV uses a method called CVS, or Cross Validation System. It mixes three checks: machine learning, which learns patterns from data; reputation, which checks how trusted an app is; and pattern checks, which look for known bad behavior. Securion says this makes detection more accurate while using less of the phone's power and memory. The consumer version also includes Voice Phishing Detector, a tool for spotting scam phone calls.

Why it matters

Phishing scams are a growing problem, and phones are a common target. Securion also launched OnScan for Message, which blocks bad text messages before they are sent. The CEO, Ko Bong-su, said that using security tools at each step, from sending to receiving, can help prevent phishing better.

What to watch

Whether OnScan for Message is adopted by text message carriers and resellers
How Securion's other tools, OnTrust and OnAppScan, grow in the market
Future AV-TEST results for OnAV

Glossary

AV-TEST: A global group that tests and rates security products such as antivirus apps.
OnAV: Securion's antivirus app for Android phones that finds harmful apps.
Voice Phishing Detector: A tool that helps spot scam phone calls, also called voice phishing.
OnScan for Message: A tool that blocks harmful text messages before they are sent, used by carriers and resellers.
Securion: A company that makes AI-based security products for mobile devices and the Internet of Things (IoT).

Yakult Honsha Website Suspended After Unauthorized Access; Impact on Customer Data Under Investigation

The official website of Yakult Honsha, which makes beverages, pharmaceuticals, and cosmetics, has been under maintenance since the night of October 26 after an unauthorized access incident. As of 11 a.m. on October 28, the site remained unavailable, and the company has not announced when it will resume; it says it will report new information, including any impact on customer data, as it becomes known.

Security전자신문Oct 28

Creinity Responds to PHP Security Vulnerabilities, Highlights Java-Based Email Security Technology

Creinity, an AI-based email security and collaboration company, said its SpamBreaker inbound email security solution does not include a PHP runtime and is therefore not directly affected by the recently disclosed PHP vulnerabilities, which allow remote code execution without authentication. The company said its core components, including the mail processing engine and management console, are built on Java, and that SpamBreaker supports three-layer inspection along with SPF, DKIM, and DMARC sender authentication. Creinity also cited CC certification for SpamBreaker and GS certification for several other products.

SecurityZDNet KoreaOct 28

Oracle and OpenAI Team Up to Tackle AI Security Threats: "Find and Fix Vulnerabilities"

Oracle and OpenAI are combining their technologies to help enterprises detect, verify, and fix software vulnerabilities as AI agents spread. The companies unveiled "Oracle AI Security Mesh," which pairs OpenAI's cybersecurity AI models with Oracle's security testing tools and can run on OCI, other clouds, and on-premises systems. Actual changes are applied only after customer approval.

SecurityArs TechnicaOct 28

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

A memory-corruption flaw, tracked as CVE-2026-97631 and rated 9.5 out of 10, affects the TianoCore EDK II codebase used to build UEFI firmware for most server vendors and data centers. The bug lies in an ICMP component and can let attackers run malicious code before the OS and Secure Boot defenses load. Because AMI published a pull request with a fix before the coordinated disclosure date, TianoCore issued a public advisory last week, and the publicly available patch makes exploit development easier.