Cybersecurity News that Matters

Cybersecurity News that Matters

Daily briefing: Military secrets, data collection from electronic cars, Salt Typhoon

Illustration by Areum Hwang, The Readable

by Dain Oh

Oct. 28, 2024
7:52 PM GMT+9

Daily Briefing is a curated listicle made available by The Readable. We select a handful of significant stories worth sharing with our readers and present them in an easy-to-read, accessible format. Dain Oh and Minkyung Shin collaborate in monitoring, selecting, and reviewing the news articles, with Arthur Gregory Willers contributing to improve the overall readability of the briefing.


1. South Korean military investigates additional involvement in leaked classified information case – South Korea’s Dong-a Ilbo

South Korea’s Defense Counterintelligence Command is investigating two additional personnel from the Army Intelligence Command in connection with a recent case in which a civilian employee, identified only as “A,” was arrested for leaking military secrets to a Chinese intelligence agent. The employee allegedly shared classified information, including the identities of undercover agents and organizational details, in exchange for substantial bribes over seven years. The new investigation aims to determine whether other insiders may have been involved in facilitating these leaks.

The investigation is currently focused on one civilian and one active-duty officer suspected of unauthorized disclosure of military secrets. Initial findings suggest they may be linked to the leak, either directly or indirectly. Forensic and in-person examinations are underway to evaluate their involvement. Although both suspects deny the allegations, the Defense Counterintelligence Command intends to intensify the investigation if evidence substantiates their role as possible facilitators in the unauthorized disclosure of classified information.

The civilian employee identified as “A” claims they were coerced by a female Chinese intelligence agent and that they began leaking information in 2017 under threats to their family’s safety. According to the allegations, “A” was compelled to cooperate after being detained by Chinese authorities in Yanji, China.

  • Related article: South Korean military secrets allegedly leaked to North Korea, sparking security controversy READ MORE

2. Privacy concerns raised over South Korea’s electric vehicle charging data collection – South Korea’s The Electronic Times

South Korea’s Ministry of Environment is facing criticism over privacy concerns related to its new “smart control slow chargers,” which are designed to prevent electric vehicle (EV) fires. The system collects sensitive vehicle information, including the vehicle identification number (VIN) and driving distance, as part of its fire prevention services, requiring users to consent to data sharing. Representative Kang Deuk-gu of the Democratic Party noted that the Ministry’s guidelines for charger subsidies mandate data collection that exceeds necessary limits.

The new chargers, equipped with Power Line Communication (PLC) modems, are designed to prevent overcharging by transmitting real-time data between EVs, chargers, and central servers. The Ministry plans an initial installation of 20,000 units, with expansion to over 330,000 existing slow chargers by 2030. However, privacy advocates are concerned that the integration of location, payment, and vehicle data could lead to substantial exposure of user information.

The Ministry of Environment maintains that fire prevention services do not require extra personal data. However, supplementary services, such as fire risk alerts sent through mobile apps, do necessitate personal information, including the VIN. The Ministry assures that user consent will be obtained for collecting such data, yet lawmakers are calling for updated privacy regulations specific to EVs to better protect against potential privacy infringements.

3. Chinese hackers said to have collected audio of American calls – The Washington Post

Chinese state-linked hackers, identified as the Salt Typhoon group, allegedly intercepted audio from calls involving U.S. political figures, including a Trump campaign adviser. This ongoing espionage operation, now under federal investigation, is raising significant national security concerns as the 2024 election approaches. The group reportedly accessed sensitive, unencrypted communications while steering clear of end-to-end encrypted channels, though the full scope of the intercepted data remains uncertain.

The hackers’ infiltration involved major telecom providers such as AT&T and Verizon, with additional attacks on systems tracking federal surveillance requests. This sophisticated operation led the White House to establish an emergency multiagency response, aiming to fully assess the breach. The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) confirmed the investigation, noting rapid intervention with affected telecom companies to mitigate further risks.

While fewer than 100 victims have been identified, officials suspect the hackers have a broader reach, targeting individuals across party lines, including staff members of Senate Majority Leader Chuck Schumer and the Harris campaign. The Trump-Vance campaign has also received alerts, and senior staff members were provided with new devices after being notified of the hack by the FBI.

4. Hacked info from state security databases sold to rich clients: Milan prosecutors – Politico

Milanese prosecutors have placed four individuals under house arrest and are investigating additional suspects in connection with a large-scale breach of Italian state security databases reportedly orchestrated by a private investigative firm. The firm is said to have accessed sensitive government data on behalf of high-profile clients, including businessmen and politicians, dating back to at least 2019. This confidential information was sold or used for blackmail, with notable figures such as Leonardo Maria Del Vecchio, son of Luxottica’s founder, and Enrico Pazzali of Fondazione Fiera Milano identified among those involved.

The investigation uncovered unauthorized access to three major databases: one tracking suspicious financial activities, another containing citizens’ financial records maintained by the tax agency, and the national police’s investigations database. Prosecutors emphasized the substantial volume of data involved—reportedly around 15 terabytes—raising concerns about data security and unauthorized access within the private sector.

Giovanni Melillo, Italy’s anti-mafia prosecutor, characterized the findings as evidence of a “gigantic and alarming market for confidential data,” highlighting the potential threats posed by illicit data trafficking within the country.


Editor’s note: The summaries of each article were created by ChatGPT 4o and reviewed by Dain Oh.

Subscription

Subscribe to our newsletter for the latest insights and trends. Tailor your subscription to fit your interests:

By subscribing, you agree to our Privacy Policy. We respect your privacy and are committed to protecting your personal data. Your email address will only be used to send you the information you have requested, and you can unsubscribe at any time through the link provided in our emails.

  • Dain Oh
    : Author

    Dain Oh is a distinguished journalist based in South Korea, recognized for her exceptional contributions to the field. As the founder and editor-in-chief of The Readable, she has demonstrated her expe...

    View all posts
Coauthor:
Stay Ahead with The Readable's Cybersecurity Insights