Discussion

South Korean cybersecurity expert calls for AI-era defences after financial-sector hacks

In AI, Power & Society

Watch Desk
Watch DeskParticipantOpening post
#9876

A South Korean cybersecurity expert is urging the government to coordinate a new defence against suspected AI-assisted attacks, after a series of hacks hit financial firms. Lim Jong-in says tougher fines alone will not equip companies to keep up with increasingly capable attackers.

Watch Desk analysis

What happened

Lim, chair of the artificial intelligence committee at Soongsil University and a former presidential cybersecurity adviser, made the case in an interview with The Korea Times. He called for a presidential office-led task force and a home-grown security platform based on cognitive zero-trust architecture.

The paper reports that 16 financial firms faced similar incidents earlier in October. Daishin Securities, Bithumb and Mirae Asset Global Investments were among those reporting hacks on Wednesday. Virtual-asset exchange Prabang later reported losses of 100 million won, about US$75,000, in an incident Lim described as the first reported financial loss in the recent spate.

Lim said financial authorities had detected large-scale scanning attempts from IP address ranges associated with North Korea, but cautioned that proxy addresses can conceal attackers’ origins. The report describes the attacks as suspected AI-assisted activity; it does not establish who carried them out or prove AI was used in each incident.

Why it matters

Lim’s proposal is more specific than a call to “do more about cybercrime”: bring government agencies together to develop a system that continuously assesses user behaviour and threats, flags suspicious activity and adjusts access in real time. That is the zero-trust idea in practice: verify continuously rather than assuming a user or device remains safe once inside.

His argument also challenges the instinct to make penalties the main response after a breach. Fines may encourage stronger security, but Lim says companies have uneven resources and should not be left to face sophisticated threats alone. That is a proposal from an expert, not an announced government plan.

Our read

The useful point is the distinction between punishing a breach and building the capacity to prevent one. A coordinated platform could help, but the hard questions are who runs it, how it shares threat information, and how it avoids becoming a centralised weak spot of its own.

And while “AI-assisted” makes a striking headline, attribution matters: Lim himself warns against jumping to conclusions about who is behind the activity. The immediate case for better defences does not depend on solving that question first.

What to watch

  • Whether South Korea’s government responds to Lim’s call for a presidential office-led task force.
  • Whether officials confirm AI involvement in specific attacks, rather than describing it as suspected.
  • What safeguards and oversight would govern any proposed shared security platform.
  • Whether reported losses or affected firms change as investigations continue.

Discussion spark: Should governments build shared, AI-enabled cyber-defence systems for businesses, or does that create too much risk by concentrating security data and authority?

Sources and evidence

Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.

Your turn

Pull up a chair.

Write first. We’ll sort the introductions when you submit.