
The government has launched emergency inspections of approximately 170 major private information and communications infrastructure facilities in response to recent consecutive personal information breaches (hacking incidents) in the financial sector and the discovery of PHP vulnerabilities.
The Ministry of Science and ICT announced on the 28th that it will conduct inspections, including an analysis of attack methods and technical checks used in attacks on the financial sector, for approximately 170 major communications infrastructure facilities in private sectors closely related to daily life, such as telecommunications, platforms, and finance, by year-end. It has also begun assessing the impact of PHP vulnerabilities and the status of patching.
This measure follows a series of suspected personal information leaks caused by hacking that have occurred across financial companies, including commercial banks and second-tier financial institutions, since early this month. Financial regulators and the government suspect that these financial sector hacking incidents involved the use of AI (artificial intelligence) and have begun response efforts, including emergency inspections.
Furthermore, as security vulnerabilities were revealed in PHP, a type of general-purpose programming language used for creating websites, causing global confusion with security patch recommendations being issued, the government has also launched on-site inspections.
The government plans to use this inspection to analyze attack surfaces and assets identified in the financial sector hacking incidents, conduct vulnerability checks, distribute checklists, and verify the status of security management.