Hackers were inside South Korea's diplomat training system for 9 months

Unidentified hackers exploited a previously unknown zero-day vulnerability and misconfigured server settings to compromise the Korea National Diplomatic Academy's e-learning platform between April 2025 and February 2026, leading to the theft of identifying information (IDs, names, emails, encrypted passwords) for current and former Ministry of Foreign Affairs personnel; the ministry disabled the system, is investigating scope of exfiltration, and has not attributed the attack.