# Source: 금융보안원, 미·일과 금융권 AI 해킹·PHP 취약점 내용 공유

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

뉴스토마토: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 금융보안원, 미·일과 금융권 AI 해킹·PHP 취약점 내용 공유

**뉴스토마토** · [https://www.newstomato.com/ReadNews.aspx?no=1317991](https://www.newstomato.com/ReadNews.aspx?no=1317991) · published 2026-10-26 · added by `curator@php.newsroom` · slug `newstomato-readnews-aspx`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T071103Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Korean finance-press piece (Newstomato, 26 October) saying Korea's Financial Security Institute is sharing information with the US FS-ISAC and Japan...

## What it says, as the collector read it

#### 금융보안원, 미·일과 금융권 AI 해킹·PHP 취약점 내용 공유

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `kr/news/newstomato/readnews-aspx`, snapshot `20261028T071103Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T071103Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Korean finance-press piece (Newstomato, 26 October) saying Korea's Financial Security Institute is sharing information with the US FS-ISAC and Japan's F-ISAC, under a 2022 memorandum, about recent financial-sector hacking incidents and about the PHP vulnerability, with no channel to China. It reports that KB Kookmin Bank and Woori Bank were confirmed to use PHP and began remediation, and that the government raised the private-sector cyber crisis alert from 'attention' to 'caution' at noon on 22 October. It also lists 16 financial institutions that suffered hacking or data-leak incidents since late September; the article does not attribute these incidents to PHP2Shell.

> 이번 PHP 취약점 사태에 대해서도 양국 기관과 정보를 주고받고 있다

_Curator's translation:_ "[It] is also exchanging information with the two countries' bodies on this PHP vulnerability episode."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "금융보안원, 미·일과 금융권 AI 해킹·PHP 취약점 내용 공유". Selected mechanically, not read by a person.

#### Capture notes

Language `ko`. Mostly about a financial-sector information-sharing arrangement; the PHP material is secondary. The photo captions note an image composited with ChatGPT. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T071103Z · HTTP 200 · https://www.newstomato.com/ReadNews.aspx?no=1317991- `headers.json` 5eda33d5b7dcc11f2c6d5bb5c64e8b4f26fe8dc0b962feb21fff9faf08b08394 548 bytes
- `page.html` 3df0eecdafd4aa2db89378ae189c4a66f2372ebe4bbd1ecc42b82b9b33fd0b67 84,772 bytes
- `provenance.json` 814c8605780459db094422095b4723438e92f93307c011711b95631847b568f7 1,578 bytes
- `rendered.html` 60779032dc44d4147e396255d4a213cda289fac1eca5a520b7b6e43dd9c6587b 418,849 bytes
- `screenshot.jpg` da9ec5a0431acb697c4a6450e7707930334787d1c36eabd8c8caaf94978cacee 544,814 bytes
- `text.txt` e83ad30bceeae366ee38c9768286b1b2f387513e4364ecf80ec42592a53d0ea9 8,988 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/newstomato-readnews-aspx/index.html