DailyDrop Korea edition No. 20 · Evening · SAT., OCT. 24, 2026 · Kim Jong-un makes surprise visit to China after more than 1 year……

The Ministry of Unification said on the 24th that Kim Jong-un, chairman of North Korea’s State Affairs Commission, was visiting China and would arrive in Dandong via the New Yalu River Bridge, Kyunghyang Shinmun and Dong-A Ilbo reported in breaking news. Yonhap reported that Kim’s surprise visit to China after more than 1 year had been confirmed. Kyunghyang Shinmun said it came 1 year and 1 month after he went to Beijing last September for the parade marking the 80th anniversary of China’s Victory Day. Citing Japan’s Kyodo News, Yonhap reported that traffic was tightly controlled in parts of Dandong that morning and hotels were also closed off. Dong-A Ilbo reported that the New Yalu River Bridge was formally opened on the 15th of this month, 12 years after its completion. Yonhap reported that a ruling-camp official said Kim appears set to return home after finishing the day’s schedule in China. North Korean media reported on the 24th that Kim presided over the 3rd Conference of Company Commanders in Pyongyang on the 22nd and 23rd (Kyunghyang Shinmun).

As Yonhap and Kyunghyang Shinmun described it as a ‘surprise’ visit, the trip became known first through the Ministry of Unification’s announcement and breaking news from foreign media, with no advance notice. Kyunghyang Shinmun reported that it came right after Kim, the subject of death rumors, reappeared in public at a military event. Dong-A Ilbo reported that North Korea and China have recently grown close fast, with the opening of the New Yalu River Bridge among other things.

For readers in Korea, the question is what signal North Korea–China contact sends for the situation on the Korean Peninsula. It is worth watching alongside whether North Korea responds to the Defense Ministry’s proposal for inter-Korean military talks (on the 23rd), covered in the morning edition.

Dong-A Ilbo reported speculation that the visit may be tied to the 25th, the 76th anniversary of China’s entry into the Korean War. This view reads the trip as a ceremonial move tied to the anniversary. But it is speculation contained in a breaking-news article, not an explanation from the authorities.

Korea Economic Daily ran an analysis defining the surprise visit across the New Yalu River Bridge as a show of North Korea–China closeness ahead of the Shenzhen APEC. In a separate article, Dong-A Ilbo put in its headline the precedent of Kim meeting President Xi Jinping to coordinate before past meetings with President Trump, pointing to a link with the diplomatic calendar.

What is confirmed is the visit announced by the Ministry of Unification, the arrival in Dandong via the New Yalu River Bridge, and the same-day return expected by a ruling-camp official. What is not confirmed is the purpose of the visit, whom he is meeting and any official Chinese announcement. What to watch is whether he returns home tonight and whether China makes an announcement.

Yonhap (visit confirmed, expected return, Oct 24) · Kyunghyang Shinmun (Ministry of Unification announcement, 1 year and 1 month, Oct 24) · Dong-A Ilbo (New Yalu River Bridge, 76th anniversary of entry into the war, Oct 24) · Korea Economic Daily (North Korea–China closeness analysis, Oct 24)

Politics · North Korea and ChinaPress ✓ 4 outlets · purpose of the visit and any official Chinese announcement unconfirmed

Kim Jong-un makes surprise visit to China after more than 1 year… crosses New Yalu River Bridge to Dandong, expected to return home same day

The Ministry of Unification said on the 24th that Kim Jong-un, chairman of North Korea’s State Affairs Commission, would arrive in Dandong, China, via the New Yalu River Bridge, and a ruling-camp official told Yonhap that he appears set to return home after finishing the day’s schedule.

The Ministry of Unification said on the 24th that Kim Jong-un, chairman of North Korea’s State Affairs Commission, was visiting China and would arrive in Dandong via the New Yalu River Bridge, Kyunghyang Shinmun and Dong-A Ilbo reported in breaking news. Yonhap reported that Kim’s surprise visit to China after more than 1 year had been confirmed, and Kyunghyang Shinmun said it came 1 year and 1 month after he went to Beijing last September to attend the parade marking the 80th anniversary of China’s Victory Day. Citing Japan’s Kyodo News, Yonhap reported that traffic was tightly controlled and hotels were also closed off in parts of Dandong that morning, and that a senior North Korean figure may have visited. Dong-A Ilbo reported that the New Yalu River Bridge linking Dandong and Sinuiju was formally opened on the 15th of this month, 12 years after its completion.

Yonhap reported that a ruling-camp official said Kim appears set to return home after finishing the day’s schedule in China, and Korea Economic Daily carried the same in breaking news. Kyunghyang Shinmun reported that North Korean media said on the 24th that Kim presided over and spoke at the Korean People’s Army’s 3rd Conference of Company Commanders in Pyongyang on the 22nd and 23rd, adding that Kim, the subject of death rumors, had appeared in public again. Dong-A Ilbo reported that the conference was the first all-army gathering since the 9th Congress of the Workers’ Party. Dong-A Ilbo reported speculation that the visit may be tied to the 25th, the 76th anniversary of China’s entry into the Korean War, and Korea Economic Daily ran an analysis headlined that the trip was a show of North Korea–China closeness ahead of the Shenzhen APEC. The purpose of the visit and any official Chinese announcement have not been confirmed.

Unfold the story and DailyDrop’s take

Dong-A Ilbo reported that global cybersecurity firm Cyfirma said on the 22nd (local time) that a Korean-speaking attacker had been observed conducting reconnaissance of web-accessible assets with a PHP-to-Shell vulnerability and validating publicly available exploit code on a private anonymous network (I2P) channel. Yonhap and SBS reported this as signs that North Korean hacking group Lazarus is preparing an attack exploiting a PHP vulnerability. Korea Economic Daily described it as a group suspected of North Korean ties. Dong-A Ilbo reported that a claim had been raised that this was reconnaissance of government agencies and financial institutions around the world, including Korea. Dong-A Ilbo added that no actual breach has been confirmed. Dong-A Ilbo reported that the Korea Internet and Security Agency (KISA) issued an additional security notice in the early hours of the 24th on the new PHP vulnerability, and that urgent interim measures are recommended because no official patch is out yet.

The gist of the reports is that a vulnerability with no official patch has to be blocked first with interim measures, and that reconnaissance and exploit-code validation were spotted in the meantime. Dong-A Ilbo explained that this flaw is a remote code execution vulnerability that arises in handling the session and in recording file-upload progress. Since the alert was raised in the morning edition, signs about who is behind the attacks have been raised for the first time.

Individuals and companies that use PHP on websites or servers should check whether they have applied the interim measures in the KISA notice. Users of public institutions and financial institutions can check whether there are changes in service notices.

Yonhap and SBS said in their headlines that Lazarus is preparing an attack exploiting a PHP vulnerability. This view reads the activity the security firm spotted as preparation by a North Korean group. Korea Economic Daily also reported that a group suspected of North Korean ties targeted government and finance.

In reporting the same matter, Dong-A Ilbo said only that Cyfirma described the attacker as Korean-speaking, and drew a line that no actual breach has been confirmed. It also described the government and financial reconnaissance as a ‘claim that was raised,’ not treating it as established fact.

What is confirmed is the reconnaissance and exploit-code validation Cyfirma spotted and KISA’s additional notice. What is not confirmed is whether the attacker is Lazarus and whether there was an actual breach. Today, watch for the interim-measures advisory and whether an official patch is released.

Dong-A Ilbo (Cyfirma alert, KISA notice, Oct 24) · Yonhap (Lazarus signs, Oct 24) · Korea Economic Daily (suspected North Korean ties, Oct 24) · SBS (Lazarus signs, Oct 24)

Society · CybersecurityPress ✓ 4 outlets · basis for naming Lazarus and any actual breach unconfirmed

North Korean hacking group Lazarus reported preparing attacks exploiting PHP flaw… Cyfirma spots ‘Korean-speaking attacker’

Dong-A Ilbo reported that global cybersecurity firm Cyfirma (CYFIRMA) said on the 22nd (local time) that, in its collection of non-public source data, it had observed a Korean-speaking attacker conducting reconnaissance of web-accessible assets with a PHP-to-Shell vulnerability and validating publicly available exploit code on a private anonymous network (I2P) channel. Yonhap and SBS carried this under the headline ‘North Korean hacking group Lazarus appears to be preparing attacks exploiting PHP vulnerability,’ while Korea Economic Daily described it as a group ‘suspected of North Korean ties.’ Dong-A Ilbo reported that a claim had been raised that it was reconnaissance of government agencies and financial institutions around the world, including Korea, while adding that no actual breach has been confirmed. Dong-A Ilbo reported that the Korea Internet and Security Agency (KISA) issued an additional security notice in the early hours of the 24th, urging caution over a newly identified remote code execution vulnerability in PHP. According to Dong-A Ilbo, the flaw arises in handling the session, which holds login information, and in recording file-upload progress; as no official security patch is out yet, urgent interim measures are recommended. In an article on ‘the full story of the PHP security incident,’ Yonhap pointed to concerns that a server could be taken over without logging in. This is a new development following the government’s cyber crisis alert raised to ‘Caution,’ covered in the morning edition.

Unfold the story and DailyDrop’s take

Inside

A Samsung Lions club official said on the 24th that an MRI reading confirmed muscle and fascia damage to Kim Jae-yoon’s right serratus anterior, Chosun Ilbo (OSEN) reported. The club explained that there is bleeding along the fascia, that it is a grade 1 injury and that the finding is that about 2 weeks of rest is needed. Yonhap reported that a major blow has hit Samsung one day before the start of the playoff. Kim Jae-yoon is the closer who led the league in saves this season. Newspim said in its headline that it is a blow following earlier injuries to other players. Chosun Ilbo (OSEN) reported the club’s policy of using its go-to relievers depending on the situation.

Without the closer in the playoff, Samsung has to decide again who pitches the 9th of tight games. Chosun Ilbo reported that the club said it would use its go-to relievers depending on the situation. Newspim pointed out that injuries have continued after those of players hurt earlier.

For Samsung fans, how the bullpen is run in the playoff without Kim Jae-yoon is what to watch. The club explained that about 2 weeks of rest is needed.

Chosun Ilbo reported in its headline and text that Kim Jae-yoon is effectively unlikely to appear in the Korean Series, let alone the playoff, and judged that Samsung’s back door has collapsed. This view sees a big hole in strength.

The club explained the medical staff’s finding that it is a grade 1 injury needing about 2 weeks of rest, and said it would use its go-to relievers depending on the situation, Chosun Ilbo (OSEN) reported. This view holds that replacements can cope.

What is confirmed is the serratus anterior damage, grade 1, about 2 weeks of rest and his removal from the playoff roster. What is not confirmed is his return date and who replaces him as closer. Today, watch for the closer replacement arrangement the club announces.

Yonhap (Kim Jae-yoon out ahead of playoff, Oct 24) · Chosun Ilbo (MRI result, go-to relievers, Oct 24) · Newspim (2 weeks out, Oct 24)

Samsung closer Kim Jae-yoon left off playoff roster with serratus anterior injury… about 2 weeks of restThe Samsung club said an MRI confirmed muscle and fascia damage to the right serratus anterior. Kim Jae-yoon, the saves leader, needs about 2 weeks of rest.Sports · ✓ 3 reports

Gyeonggi Province cut the full 100 million won budget for the ‘Gyeonggi Fire 119 Memorial Day’ honoring firefighters killed in the line of duty, and as a result this year’s event was held on a sharply reduced scale, Kyunghyang Shinmun reported. According to Kyunghyang Shinmun, the memorial and experience event that some 5,500 Gyeonggi residents joined last year was scaled down to center on bereaved families. The event was held on the 24th under the name ‘2nd Gyeonggi Fire 119 Memorial Day’ at Haetae Park inside the Gyeonggi Fire and Disaster Headquarters. Gyeonggi Governor Choo Mi-ae comforted the bereaved families of firefighters killed in the line of duty, Kyunghyang Shinmun reported. Yonhap reported that Choo pledged stronger safety measures and better treatment for firefighters. Kyunghyang Shinmun’s headline summarized that Choo, who apologized for her ‘fire-service straw’ remark, pledged better treatment.

What stands out is that the governor attended and pledged better treatment at an event held with its budget cut entirely. Kyunghyang Shinmun reported that the cut changed the scale of the event greatly from last year.

For Gyeonggi residents, what matters is how fire-related budgets are drawn up and how the scale of the memorial event will change next year. For bereaved families of firefighters killed in the line of duty, the specifics of the better treatment the governor announced are what count.

Kyunghyang Shinmun, under a headline about a memorial shrunk by budget cuts, highlighted that the cut led to a scaled-back event. This view holds that the province’s budget decision affected the honors given to firefighters killed in the line of duty.

Yonhap reported that Choo attended the event and pledged stronger safety measures and better treatment for firefighters. Kyunghyang Shinmun reported that the governor apologized for her ‘fire-service straw’ remark. This view puts weight on the governor having responded with an apology and a pledge.

What is confirmed is the full cut of the 100 million won budget, the scaled-back event, and the governor’s attendance and pledge of better treatment. What is not confirmed is the concrete plan and timing for better treatment. Today, watch whether the province announces any follow-up measures.

Kyunghyang Shinmun (cut, scaled-back event, Oct 24) · Yonhap (memorial event sharply scaled back, Oct 24)

Memorial event for firefighters killed in the line of duty scaled back sharply after 100 million won budget cut in full… Gov. Choo Mi-ae pledges better treatmentGyeonggi Province cut the 100 million won budget for 119 Memorial Day in full, and the event held on the 24th was reduced. Gyeonggi Governor Choo Mi-ae attended and pledged better treatment.Society · ✓ 2 reports

3-vehicle rear-end collision on Yeongdong Expressway in Hoengseong… 2 dead, 3 injuredAround 2:20 a.m. on the 24th, 3 vehicles collided at the 141.5 km point in the Gangneung direction. A man in his 70s and a woman in her 60s in an Orlando died.Society · ✓ 3 reports

Dong-A Ilbo reported that the Israeli military said on the 23rd (local time) that it had shot dead 2 gunmen who shot and killed 2 soldiers, thwarting a terror attack on civilians. The incident came just days before the 27th election that will decide whether Prime Minister Benjamin Netanyahu is re-elected. The Israeli military said that in response to the incident in the West Bank in which 2 soldiers were killed and others wounded, it had begun a precise, targeted and thorough search in the Hebron area, which it expects to continue for days. Yonhap reported that a mass shooting broke out in the southern West Bank four days before the general election and that Netanyahu issued a closure order for the West Bank. In its headline, Dong-A Ilbo said Hebron infrastructure that could pose a threat is being demolished.

With a security incident erupting days before the general election, it could affect the election schedule and the campaign environment. Yonhap said in its headline that the election campaign was thrown into emergency mode.

For readers in Korea, this is a matter in which Middle East developments could flow into oil prices and security news. The result of the general election on the 27th should also be checked according to the schedule Yonhap and Dong-A Ilbo reported.

Dong-A Ilbo reported that the Israeli military said it killed the 2 gunmen, began a search in Hebron and would prevent further terror attacks. This view regards responding with military operations and closure as a legitimate security measure.

Dong-A Ilbo’s headline said Israel is demolishing infrastructure that could pose a threat in Hebron, where the shooting occurred, hinting at another issue: the effect on residents’ lives. This view also considers the burden security measures place on West Bank residents.

What is confirmed is the deaths of 2 soldiers, the killing of 2 gunmen, the Hebron search and the West Bank closure order. What is not confirmed is the effect on the election schedule. Today, watch whether the search widens and whether the general election on the 27th stays on schedule.

Dong-A Ilbo (2 soldiers dead, Hebron search, Oct 24) · Yonhap (West Bank shooting, closure order, Oct 23) · SBS (mass shooting 4 days before the general election, Oct 23)

Shooting in West Bank four days before Israel’s general election… 2 soldiers dead, military launches Hebron searchThe Israeli military said on the 23rd that 2 soldiers were killed in the West Bank and that it had shot dead 2 gunmen. With the election on the 27th ahead, Prime Minister Netanyahu issued a closure order for the West Bank.International · ✓ 3 reports

Dong-A Ilbo reported that at around 12:16 p.m. on the 23rd in Wollim-ri, Dogae-myeon, Gumi, North Gyeongsang, a report came in that a worker had been hit by a rice sack and crushed while moving rice sacks with a forklift. In this accident a woman in her 50s, identified as A, was taken to hospital by a 119 ambulance crew in cardiac arrest, Dong-A Ilbo reported. Dong-A Ilbo said in its headline that another accident occurred at around 1:14 p.m. the same day in Goa-eup, Gumi, and a man and woman in their 50s fell into cardiac arrest. Yonhap reported that police are investigating the Gumi accident. Yonhap and SBS reported that at around 10:48 a.m. on the 24th, a worker in their 50s, identified as A, was crushed and killed by an overturned forklift at a manufacturer in Yeosu, Jeonnam-Gwangju.

Dong-A Ilbo reported, as the presumed cause of the Gumi accident, that in forklift work a load can block the driver’s view and lead to collisions with pedestrians. The Yeosu accident involved a worker crushed under an overturned forklift, and its cause was not confirmed in the reports.

For workers at sites that use forklifts, the key is checking for situations where cargo blocks the view and whether anyone is in the work path. For families and colleagues, calling 119 and giving first aid after an accident is important.

Dong-A Ilbo reported that the Gumi accident is presumed to have occurred when a rice sack hanging from the forklift blocked the driver’s view and the forklift hit a pedestrian, pointing to visibility as the cause. This view stresses safety rules for work methods.

Yonhap reported that police have launched an investigation into the Gumi accident, focusing on an inquiry to determine responsibility. This view holds that the cause and responsibility for the accident must be established by investigation.

What is confirmed is the transport of a worker in cardiac arrest in Gumi and the death of a worker in their 50s in Yeosu. What is not confirmed is the condition of the Gumi victim and the cause of the Yeosu accident. Today, watch the police investigation results and reports on the victim’s condition.

Yonhap (Gumi and Yeosu accidents, Oct 24) · Dong-A Ilbo (Gumi accident, Oct 24) · SBS (Yeosu accident, Oct 24)

Forklift accidents in succession in Gumi and Yeosu… cardiac arrest in Gumi, worker in their 50s dies in YeosuIn Gumi on the 23rd a worker was crushed in a forklift accident and taken to hospital in cardiac arrest, and on the 24th at a Yeosu factory a worker in their 50s was crushed and killed by an overturned forklift.Society · ✓ 3 reports

DailyDrop.

Kim Jong-un makes surprise visit to China after more than 1 year… crosses New Yalu River Bridge to Dandong, expected to return home same day

North Korean hacking group Lazarus reported preparing attacks exploiting PHP flaw… Cyfirma spots ‘Korean-speaking attacker’

After Oh Se-hoon’s acquittal, ruling camp’s ‘impeach Cho Hee-de’ talk and People Power Party’s ‘stop intimidating the judiciary’ clash… President Lee’s approval rating in the 40% range

FC Seoul draw 1-1 with Gangwon to clinch K League 1 title… 7th overall, first in 10 years since 2016

Milwaukee beat Tampa Bay 3-2 in World Series Game 1… starter’s first pitch clocked at 166.6 km in first WS in 44 years

By the numbers

Unverified — what we could not confirm

Influencer watch

What to watch today