Cyber Security News

Hacking Editorial Brief — October 28, 2026

South Korean Financial Sector Hit by Coordinated Intrusion Campaign

South Korean financial institutions including cryptocurrency exchange Bithumb and multiple securities firms experienced data breaches in what regulators described as a widespread wave of intrusions, according to statements from the Financial Supervisory Service. Bithumb confirmed that attackers compromised its in-house mobile system, leading to personal information leakage. The FSS Governor acknowledged that "major financial investment companies experienced overall hacking incidents," though the number of affected organizations, scope of data exposure, and whether the intrusions share common infrastructure or tradecraft have not been disclosed. Reuters reports that three firms confirmed breaches, while Korean media indicates the incidents extend beyond banking into securities and asset management sectors. The coordinated timing and industry targeting suggest an organized campaign, though attribution and operational details remain under investigation.

Widespread Exploitation Activity Targets Unpatched Infrastructure

Researchers report active exploitation of multiple vulnerabilities across enterprise and e-commerce platforms. A credit card skimming operation compromised a shared analytics script used by e-commerce platform Convertr to steal payment card data from customers, according to Bleeping Computer. The supply chain compromise allowed attackers to harvest credentials across multiple storefronts relying on the shared script. Separately, a working exploit for an unpatched Linux kernel privilege escalation vulnerability (ZDI-CAN-33367) was publicly released before receiving a CVE identifier or upstream fix, allowing unprivileged users to modify read-only files in memory. The Federal Election Commission experienced a hacking attempt causing site outages, though officials stated the incident is not expected to impact ballot casting—only potential disruption to campaign finance data analysis. Meanwhile, Japanese foreign exchange provider GMO Internet offered up to $1 million for information leading to arrests following its Desktop Cloud breach, though the company has not confirmed whether the threatened follow-up ransomware attack materialized. In sentencing news, Ukrainian national Artem Stryzhak received 70 months for conspiracy to commit computer fraud in connection with ransomware attacks against hospitals, government entities, and businesses.

Sources: Reuters · CoinDesk · Chosun · Bleeping Computer · Channel E2E · Shacknews · The Hacker News · Justice.gov