South Korea breaches highlight Asia's identity, IoT security risks

Recent cybersecurity incidents in South Korea have underscored escalating risks surrounding identity security and connected devices across Asia's rapidly digitizing economy, according to Security Brief Asia.

The country's largest e-commerce platform, Coupang, disclosed a major breach potentially affecting 34 million customers, sparking political scrutiny and debates over corporate data protection accountability. Simultaneously, police arrested four individuals for allegedly hacking over 120,000 internet-connected cameras, exploiting the footage for illicit purposes. According to Keeper Security's APAC lead Takanori Nishiyama, the Coupang incident exemplifies a systemic failure in privileged access governance, where compromised credentials enable attackers to move undetected.

He emphasized that "identity is the new perimeter," advocating for strict lifecycle management of access rights, continuous monitoring, and AI-powered threat detection. The camera hacks, meanwhile, reveal foundational weaknesses in IoT security, with devices often deployed with default passwords and outdated firmware, making them easy targets for automated attacks. Nishiyama advised consumers and organizations to enforce strong authentication, regular updates, and network segregation.