Cyber Security Center

Encrypted, then readable: Korea's startup platform shipped the key inside the API

Records for about 5,000 applicants were encrypted and still exposed, because the key travelled in the API response. The warning about that API arrived a month early.