House byline
Security correspondent
Dongwook Han is a house byline for InfoHandle’s Security desk.
The Financial Services Commission keeps its caution-level cyber alert active after dark-web posts advertised fresh loan-portal credentials tied to the Oct. 8 recruiter shutdown.
South Korea's Agency for Defense Development completed its first flight test of an indigenous hypersonic glide vehicle on Thursday, with President Lee Jae Myung watching from a secure situation room.
Financial authorities kept a caution-level consumer alert in force as lenders fed breach-linked phone numbers into the ASAP anti-phishing platform shared with carriers and police.
Pyongyang rejected Seoul’s finding that a North Korean mine wounded three soldiers and warned that any jackboot crossing the line would draw instant force.
The National Police Agency opened a four-team investigation after seven lenders reported leaks tied to loan-agent portals, while regulators ordered security fixes by Thursday.
Seoul’s final investigation blamed a North Korean plastic mine south of the MDL for wounding three soldiers and began clearing the field the same afternoon under U.N. Command coordination.
Seoul Metropolitan Police Agency cyber investigators arrested 14 people accused of running a subscription-trap ring that billed victims through fake streaming renewal pages, the agency said in a Monday statement.
Financial Services Commission Chairman Lee Eog-weon told banks and insurers to complete swift security inspections and report results after cyberattacks exposed customer records across the industry.
South Korea’s Joint Chiefs said resin antipersonnel mines planted south of the Military Demarcation Line caused the Sept. 21 blasts that wounded three soldiers, then cleared the belt at 12:51 p.m. Monday with U.N. Command coordination.
The Financial Services Commission ordered full penetration tests at brokerages after credential leaks tied to employee VPN accounts, demanding fixes before October trading volumes return from the Gaecheonjeol pause.
North Korea fired an intermediate-range missile from Wonsan while claiming evasive maneuvers and a 1,000-kilometer range that Seoul and Tokyo could not verify.
Seoul’s National Security Office met after the Joint Chiefs detected a ballistic launch from Wonsan, while Kim Yo-jong claimed Pyongyang tested an intermediate-range weapon with artificial-intelligence flight control.
The Korea Financial Intelligence Unit traced 27 billion won in voice-phishing payouts through Cambodian remittance shells in September, flagging call centers in Phnom Penh that pose as prosecutors demanding security deposits.
North Korea dismissed Seoul’s demands over DMZ blast injuries on Friday, then fired at least one apparent ballistic missile toward the Sea of Japan on Saturday as tensions over the border incident hardened.
South Korea’s Joint Chiefs detected a Saturday morning launch from the Wonsan area after Kim Yo Jong dismissed Seoul’s demand for a DMZ mine apology, keeping peninsula tensions on a hair trigger.
The pan-government voice phishing joint investigation team disbanded Friday after booking 1,381 suspects and recovering 36 billion won in four years.
Shinhan Bank reported that loan, income, and phone data for about 25,000 customers leaked on 1 October after a suspected overseas AI-assisted intrusion; the Financial Supervisory Service opened an on-site inspection and the bank blocked external IPs tied to the activity.
Investigators concluded an armistice breach after recovering a North Korean anti-personnel mine south of the Military Demarcation Line, weeks after blasts injured three South Korean troops.
President Lee used the Gyeryongdae ceremony to showcase new strike and air-defense hardware while urging North Korea to return to dialogue after last week’s DMZ mine blast.
The Financial Supervisory Service ordered retail banks to rotate printed anti-phishing hotline numbers every 90 days starting Oct. 1 after voice scams copied static helplines.
Kim Yo-jong denied North Korea planted the mine that South Korea’s Joint Chiefs say likely wounded three soldiers on Sept. 21, threatening merciless retaliation if live fire hits northern troops.
President Lee Jae Myung’s government sent a bill to the National Assembly outlining how Seoul would acquire and operate its first nuclear-powered boats.
National Assembly committees were told on Sept. 29 that voice-phishing losses reached 1.2578 trillion won in 2025, with institution-impersonation scams driving most of the surge.
South Korea’s Joint Chiefs said forensic traces and blast patterns point to North Korean antipersonnel mines after investigators reached the DMZ site where three soldiers were wounded clearing a patrol route.
South Korea’s Joint Chiefs said forensic traces and crater analysis point to North Korean wooden-box mines in a September 21 explosion that wounded three troops near the border.
South Korea's Joint Chiefs said a preliminary probe with the U.N. Command points to recently emplaced mines about 10 meters south of the Military Demarcation Line, warning Pyongyang would bear responsibility.
The Korea Coast Guard seized export-bound drone kits at Busan Pier after customs agents found flight controllers and encrypted radios mislabeled as toy parts.
About 40 South Korean and U.N. Command personnel reached the edge of an uncharted mine belt but turned back before recovering fragments from Monday's double blast that seriously wounded two front-line officers.
Gyeonggi police said four Chinese nationals are suspected in a Bundang restaurant vandalism case and may have left South Korea on holiday eve, urging witnesses to submit CCTV tips through a provincial hotline.
Police say four Chinese nationals sprayed paint and an unknown substance on food at a Bundang Chinese restaurant early Thursday, then reached Incheon Airport and left the country before investigators could arrest them.
The ROK–UNC joint investigation into the Sept. 21 Paju DMZ mine blast starts Sunday, two days earlier than first scheduled, after opposition lawmakers turned the five-day gap before the first ROK entry into a delay argument.
JCS Chairman Jin Yeong-seung inspected the Army's 25th Division in Paju on Friday as U.N. Command investigators joined the forensic probe into Monday's twin DMZ blasts that injured three people, among them a battalion commander. Fragment analysis at the National Forensic Service is still pending and the field investigation is expected to run through the Chuseok holiday.
Kospi sidecars have fired 49 times in 2026, a record pace that has market-structure specialists questioning whether a five-minute program-trading halt still does what it was built to do.
Korea Internet & Security Agency warned Wednesday of a Chuseok smishing wave impersonating family gift transfers and bank security checks, urging households to verify payment requests outside chat threads.
North Korean state media said the military test-fired upgraded 240mm multiple-launch rockets on Tuesday with an autonomous pinpoint guidance system, with Pak Jong Chon calling for “deadliest” strike forces concentrated on the southern border.
The Financial Supervisory Service warned drivers about fake Chuseok gift-card QR stickers on expressway service-area pumps and restroom doors, schemes that harvest payment credentials when travelers scan codes promising bonus holiday credits.
South Korea’s military said Wednesday that two consecutive explosions Monday inside the demilitarized zone critically wounded a staff sergeant and a battalion commander during a route-clearance mission south of the Military Demarcation Line, with National Forensic Service analysis under way on mine fragments and UNC notification.
Seoul Metropolitan Police broke up Telegram forex rooms that recruited university investment clubs with fake internship badges and drained student accounts through offshore MT4 servers, arresting nine organizers after Kookmin and Woori flagged mule flows tied to campus chat groups.
The Financial Services Commission fined a mid-tier life insurer and ordered broker portals to strip downloadable pension annuity illustrations after 1,240 customer PDFs leaked through misconfigured agent logins, exposing national ID fragments and payout schedules insurers had promised to keep off the open web.
Pyongyang launched two ballistic missiles from Wonsan on Sunday, prompting a Monday trilateral call among South Korean, U.S. and Japanese diplomats as allied drills continue in the Pacific.
South Korea’s Joint Chiefs of Staff said three military officers were hurt by an unexplained blast south of the Military Demarcation Line during a western-sector search, with two evacuated by helicopter in serious condition as investigators weigh a shifted landmine.
NHN Cloud will require customer-managed encryption keys on all public-sector Kubernetes tenants from November, blocking platform-held keys for ministries that failed a summer audit of secret rotation logs.
The National Police Agency’s cyber bureau seized 412 SIM gateways and 1,900 prepaid cards in a Bucheon warehouse tied to voice-phishing rings, as carriers freeze bulk activations ahead of Chuseok remittance peaks.
South Korea’s Joint Chiefs said North Korea launched a short-range ballistic missile from Wonsan toward the East Sea on Sunday afternoon, flying about 450 kilometers as the presidential National Security Office convened an emergency meeting and urged Pyongyang to stop UN-banned tests.
KISA will downgrade municipal email domains that still publish DMARC at p=none after a phishing wave spoofed county tax notices, giving 226 local governments until December to reach quarantine or lose centralized incident feeds.
The Financial Supervisory Service will require quarterly credential resets and out-of-band callbacks on equity trading desks after voice-cloned “CEO approval” calls tricked two brokerages into releasing standing-proxy orders, extending email-spoof lessons from the LS Securities case.
Shinhan Bank froze 12,400 cryptocurrency-linked accounts in August after pig-butchering tip volume tripled, routing suspicious on-ramps through joint FSS-Korean National Police Agency queues ahead of Chuseok remittance season.
KISA will require HMAC-signed webhooks on certified open-API invoice feeds by March 2027 after a wave of forged tax-invoice callbacks drained SME accounts, giving fintech middleware vendors a nine-month retrofit window.