South Korea: 16 firms breached.
16 firms breached
On Oct 14, Korea's Financial Services Commission confirmed breaches at 16 firms, including banks, savings banks and crypto firms. About 100,000 personal records leaked. CrowdStrike linked some attacks to ARTEX, a China-developed AI pentesting tool.
Source: Korea FSC (Oct 14), Infosecurity Magazine (Oct 8)
1,411 flaws fixed
Microsoft fixed 1,411 flaws on Oct 13. Exploited Windows Shell bug CVE-2026-96951 bypasses the "Mark of the Web" warning on downloads. Source: BleepingComputer (Oct 13), CISA
Hardware wallet implant
Ledger found an unauthorized implant in a device sold by a Southeast Asian reseller. At setup, it read the screen's 24-word recovery phrase and sent it via LTE. Ledger says direct sales were unaffected.
Source: The Record (Oct 13)
This week's to-do
- "Bank" calling? Hang up, call the official number
- Install Windows updates today
- Buy hardware wallets from official channels; never share your recovery phrase
