Major banks plan bigger cybersecurity budgets for 2027

Major Korean banks are preparing to increase cybersecurity spending next year as they respond to suspected AI-driven attacks and a newly disclosed PHP vulnerability. Hana Bank plans to spend more than 100 billion won, while NH NongHyup Bank is considering a budget of about 100 billion won and KB Kookmin Bank has announced plans to exceed 100 billion won. Banks are also inspecting affected services, applying security measures and, in some cases, suspending services while addressing vulnerabilities.

Hana Bank’s planned information security budget is more than 50 percent higher than this year’s.

NH NongHyup Bank is weighing an increase of around 20 percent, while Woori Bank’s security department is considering spending about 20 percent more on related systems.

The PHP flaw could allow attackers to execute server commands without authentication, potentially exposing customer data or enabling control of a server.

The Financial Security Institute urged banks to check for affected PHP versions, install patches and investigate systems for signs of a breach.

Kookmin Bank has completed security measures for two of five relevant services and will suspend the other three while addressing their vulnerabilities.

Published Oct 25, 2026 2:21 pm KST

Emergency checks launched, affected services suspended over PHP security flaw

A man walks past ATMs operated by major banks in Seoul, Sunday. Yonhap

Major Korean banks are preparing to raise their information security spending next year following a wave of suspected artificial intelligence (AI) agent-driven cyberattacks and data breaches across the financial sector, industry officials said Sunday.

Some intend to commit at least 100 billion won ($75 million) each to bolstering cyber defenses. The lenders have also launched urgent inspections and taken certain services offline to address a recently disclosed security flaw in PHP, a programming language used to build applications that process requests on web servers, including user logins and online posts.

Hana Bank aims to earmark more than 100 billion won for information security next year, an increase of more than 50 percent from this year. Priorities include developing AI-powered defenses against cyberattacks and hiring security specialists.

NH NongHyup Bank is weighing a budget increase of around 20 percent, which would bring its spending to approximately 100 billion won.

KB Kookmin Bank has already announced plans to set aside more than 100 billion won for security next year.

At Woori Bank, the department overseeing information security is considering spending about 20 percent more on related systems. Shinhan Bank will draw up its budget in line with its medium-term information security strategy and allocate additional funds as needed.

Alongside those spending plans, banks are checking their exposure to the PHP vulnerability.

Disclosed on Wednesday, the flaw could enable attackers to execute commands on a server without authentication. If exploited, it could expose customer data or allow attackers to take control of a server.

The Financial Security Institute responded that day by urging banks to check whether they use affected versions, install patches and examine their systems for evidence of a breach. Banks running outdated versions that no longer receive security updates were advised to switch to supported releases.

Kookmin has completed security measures for two of five relevant services and will suspend the remaining three while addressing their vulnerabilities. It has also raised its security monitoring threat level.

Woori has finished securing two relevant services accessible from outside the bank.

Shinhan said its bankwide review did not uncover the flaw. Hana and NongHyup likewise reported no confirmed exposure among their relevant customer-facing services.

“Information security teams are under intense pressure as they respond to the PHP flaw while continuing to deal with the AI hacking incidents,” a commercial bank official said. “Banks are maintaining the highest level of security monitoring around the clock.”

Gov't issues consumer alert, launches monthlong effort to prevent fraud after data breaches

Shinhan, Kookmin, Hana data breaches fuel concerns over AI-powered cyberattacks in financial sector

PHP security flaws alarm Korean government, companies

What is PHP and why did it take government websites offline?

为应对疑似人工智能驱动的攻击和新近披露的PHP漏洞，韩国主要银行正准备明年增加网络安全支出。韩亚银行计划投入超过1000亿韩元，NH农协银行正在考虑约1000亿韩元的预算，而KB国民银行则宣布计划投入超过1000亿韩元。各银行也在检查受影响的服务，采取安全措施，并在某些情况下暂停服务以修复漏洞。

Hana银行计划的信息安全预算比今年高出50%以上。

NH NongHyup银行正在考虑增加约20%的支出，而Woori银行的安全部门正在考虑在相关系统上增加约20%的支出。

PHP 的这个漏洞可能允许攻击者在未经身份验证的情况下执行服务器命令，从而可能泄露客户数据或控制服务器。

金融安全研究所敦促各银行检查受影响的 PHP 版本，安装补丁程序，并调查系统是否存在安全漏洞的迹象。

国民银行已完成五项相关服务中两项服务的安全措施，并将暂停其他三项服务，同时解决其漏洞。

发布于2026年10月25日下午2:21（韩国标准时间）

紧急检查已启动，受影响服务因 PHP 安全漏洞暂停

周日，一名男子走过首尔各大银行的自动取款机。（韩联社）

业内人士周日表示，在金融领域发生一系列疑似人工智能（AI）代理驱动的网络攻击和数据泄露事件后，韩国主要银行正准备明年增加信息安全方面的支出。

部分贷款机构计划各自投入至少1000亿韩元（约合7500万美元）用于加强网络安全防御。此外，为了应对近期披露的PHP（一种用于构建处理网络服务器请求的应用程序的编程语言，这些请求包括用户登录和在线帖子）安全漏洞，这些贷款机构已启动紧急检查并暂停了部分服务。

韩亚银行计划明年拨出超过1000亿韩元用于信息安全，比今年增长超过50%。重点领域包括开发人工智能驱动的网络攻击防御系统和招聘安全专家。

NH农协银行正在考虑将预算增加约20%，这将使其支出达到约1000亿韩元。

KB国民银行已宣布计划明年拨出超过1000亿韩元的资金用于担保。

友利银行负责信息安全的部门正在考虑增加约20%的相关系统支出。新韩银行将根据其中期信息安全战略制定预算，并根据需要拨付额外资金。

除了这些支出计划之外，银行还在检查其面临的 PHP 漏洞风险。

该漏洞于周三披露，可能使攻击者无需身份验证即可在服务器上执行命令。如果被利用，可能会泄露客户数据或允许攻击者控制服务器。

金融安全研究所当天做出回应，敦促各银行检查是否使用了受影响的版本，安装补丁程序，并检查系统是否存在安全漏洞。该研究所建议运行不再接收安全更新的过时版本的银行切换到受支持的版本。

国民党已完成五项相关服务中两项的安全整改措施，并将暂停其余三项服务，以修复其漏洞。同时，国民党也提高了安全监控威胁级别。

Woori 已完成两项可从银行外部访问的相关服务的部署。

新韩银行表示，其全行范围的审查并未发现该缺陷。韩亚银行和农协银行也同样报告称，其相关的面向客户的服务中未发现已确认的风险敞口。

一位商业银行官员表示：“信息安全团队正承受着巨大的压力，他们既要应对PHP漏洞，又要继续处理人工智能黑客攻击事件。各家银行正在全天候保持最高级别的安全监控。”

政府发布消费者警示，启动为期一个月的行动，防止数据泄露后的欺诈行为。

新韩、国民、韩亚数据泄露事件加剧了人们对金融领域人工智能网络攻击的担忧

PHP安全漏洞令韩国政府和企业感到担忧

什么是 PHP？为什么它会导致政府网站宕机？