InfoSecBulletin Cybersecurity for mankind
Employee data at Korean Air, South Korea’s largest airline, was leaked following a cyberattack on a partner firm that provides in-flight meals and onboard services, industry sources reported on Monday.
According to the sources, Korean Air issued an internal notice earlier in the day informing employees that KC&D, the airline’s catering and onboard sales supplier, had recently suffered a cyberattack by a hacker group.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
It was the latest incident in a series of recent data breaches affecting major companies, including Coupang Inc., KT Corp. and Shinhan Card Co.
The airline reported that the breach exposed the personal data of Korean Air employees, including names and phone numbers, stored on KC&D’s servers.
Korean Air learned of the incident from KC&D and has implemented emergency security measures while informing the authorities.
Employees are advised to stay alert for possible secondary damage and to be cautious of suspicious texts or emails.
While Korean Air has yet to attribute the attack, the Clop ransomware gang has claimed responsibility for the KC&D attack in November and later published the allegedly stolen data on its dark web leak site, making it available for download via Torrent.
