A joint public-private investigation team has spent the past 500 days probing cyber breaches that hit South Korea’s telecommunications and broadcasting industry. Its investigations covered SK Telecom’s USIM hacking incident, KT’s illegal femtocell-linked case and Tving’s account information leak, and it was also deployed to a Coupang breach. The team found repeated shortcomings in basic security practices such as account and authentication management, log retention and abnormal-sign detection, and identified cases of late or missing incident reporting.

Security companies in South Korea and abroad are moving to strengthen AI-based security product lineups to counter threats tied to the spread of AI. CrowdStrike added AI agent identity functions, parallel investigations and malicious open-source package blocking to its Falcon platform, and launched Falcon IQ. Cloudflare and Akamai introduced new security capabilities. Korean firms Pagonetworks and ITCEN Group unveiled new strategies and products, while more tools are being built on Nvidia open-source models.