InfoSecBulletin Cybersecurity for mankind
Employee data at Korean Air, South Korea’s largest airline, was leaked following a cyberattack on a partner firm that provides in-flight meals and onboard services, industry sources reported on Monday.
According to the sources, Korean Air issued an internal notice earlier in the day informing employees that KC&D, the airline’s catering and onboard sales supplier, had recently suffered a cyberattack by a hacker group.
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
It was the latest incident in a series of recent data breaches affecting major companies, including Coupang Inc., KT Corp. and Shinhan Card Co.
The airline reported that the breach exposed the personal data of Korean Air employees, including names and phone numbers, stored on KC&D’s servers.
Korean Air learned of the incident from KC&D and has implemented emergency security measures while informing the authorities.
Employees are advised to stay alert for possible secondary damage and to be cautious of suspicious texts or emails.
While Korean Air has yet to attribute the attack, the Clop ransomware gang has claimed responsibility for the KC&D attack in November and later published the allegedly stolen data on its dark web leak site, making it available for download via Torrent.
