Yesterday, I came across a number that made me delete the note on my phone where I stored my passwords.
South Korea’s Financial Services Commission (FSC) announced a comprehensive cybersecurity upgrade for the financial system. It followed an “industry-wide health check”: using a 12-item checklist, they inspected 555 financial institutions and found security flaws at 130 of them. That’s 130—not 13.
Even more alarming was the reason: 16 institutions were confirmed to have suffered security incidents, involving the leak of around 100,000 customer records—including names, phone numbers, email addresses, and national ID numbers. Two crypto companies were named: Streami, operator of the Gopax exchange, and trading platform Prabang (which disclosed on October 2 that it had been hacked and customers’ personal information had been exposed). The FSC said it hasn’t yet determined whether the attackers used AI, or whether the same group was behind the incidents.
The problems uncovered in the health check were all too familiar: outdated security software, unpatched systems, and no strong authentication on critical systems. This wasn’t some sophisticated APT attack; it was a failure to get the basics right.
Here’s what the reform plan looks like: large institutions will move from annual vulnerability assessments to at least twice a year; threat monitoring will be stepped up; executives will be held accountable when incidents occur; unannounced inspections will be allowed in emergencies; and the use of AI monitoring at smaller institutions will be considered.
In a nutshell: South Korea is changing the locks on the crypto industry. On October 13, it had just blocked 27 non-compliant crypto websites, including several well-known international exchanges. Now it’s reinforcing security at licensed institutions—the bar is being raised, and those with the “strongest locks” will be the ones left standing. In the long run, this favors compliant industry leaders; in the short term, compliance costs will rise for smaller platforms.
Three things you can do tonight:
1. Turn on 2FA. If you can use a hardware key, don’t rely on SMS alone.
2. Don’t reuse the email address or password for your exchange account on other websites.
3. Slim down your old accounts by removing unused permissions and API keys.
This is not investment advice. DYOR. Trading involves risk.
#SouthKoreaPlansTighterCybersecurityRules
#韩国 #Cybersecurity
South Korea’s Financial Services Commission (FSC) announced a comprehensive cybersecurity upgrade for the financial system. It followed an “industry-wide health check”: using a 12-item checklist, they inspected 555 financial institutions and found security flaws at 130 of them. That’s 130—not 13.
Even more alarming was the reason: 16 institutions were confirmed to have suffered security incidents, involving the leak of around 100,000 customer records—including names, phone numbers, email addresses, and national ID numbers. Two crypto companies were named: Streami, operator of the Gopax exchange, and trading platform Prabang (which disclosed on October 2 that it had been hacked and customers’ personal information had been exposed). The FSC said it hasn’t yet determined whether the attackers used AI, or whether the same group was behind the incidents.
The problems uncovered in the health check were all too familiar: outdated security software, unpatched systems, and no strong authentication on critical systems. This wasn’t some sophisticated APT attack; it was a failure to get the basics right.
Here’s what the reform plan looks like: large institutions will move from annual vulnerability assessments to at least twice a year; threat monitoring will be stepped up; executives will be held accountable when incidents occur; unannounced inspections will be allowed in emergencies; and the use of AI monitoring at smaller institutions will be considered.
In a nutshell: South Korea is changing the locks on the crypto industry. On October 13, it had just blocked 27 non-compliant crypto websites, including several well-known international exchanges. Now it’s reinforcing security at licensed institutions—the bar is being raised, and those with the “strongest locks” will be the ones left standing. In the long run, this favors compliant industry leaders; in the short term, compliance costs will rise for smaller platforms.
Three things you can do tonight:
1. Turn on 2FA. If you can use a hardware key, don’t rely on SMS alone.
2. Don’t reuse the email address or password for your exchange account on other websites.
3. Slim down your old accounts by removing unused permissions and API keys.
This is not investment advice. DYOR. Trading involves risk.
#SouthKoreaPlansTighterCybersecurityRules
#韩国 #Cybersecurity