The ‘Mitos Shock’: South Korea Issues Emergency AI Security Rules

Translation result.

As the AI security threat dubbed the “Mitos Shock” spreads, the government has moved to issue emergency security guidelines for company CEOs.

Deputy Minister Ryu Jemyung of the Ministry of Science and ICT told a special session of the National Assembly’s Science, ICT, Broadcasting and Communications Committee on April 28 that the ministry will quickly distribute guidance detailing the steps security officers and CEOs should take, and push for simultaneous implementation across the field.

Ryu made the remarks in response to questions from Democratic Party lawmaker Lee Joo-hee during the committee’s fifth special session that morning.

The government is focusing in particular on small and medium-sized enterprises, which generally have weaker cybersecurity capabilities. Ryu said helping SMEs respond effectively to the situation is a top priority, and pledged continued tailored security consulting and real-time response support.

Officials say they will go beyond issuing guidance, mobilizing all available resources — including the AI Safety Institute — to close security gaps on the ground.

The ministry is also pursuing cooperation with global AI firms. Ryu said officials are exploring participation in Anthropic’s Glass Wing security project, with the goal of rapidly adapting international defense measures for use domestically.

Authorities are issuing security advisories to prepare for the possibility that AI tools could be exploited by attackers. Ryu said the government is drafting notices on the level of security monitoring needed to prevent AI capabilities from falling into attackers’ hands or being used in attacks, but he added that many additional measures are still required. He said the government will seek to include funding to strengthen security systems in next year’s budget.

But lawmakers at the session criticized the government for moving too slowly. Committee chair Choi Min-hee sharply rebuked officials, saying, “Stop repeating formalistic answers.” Choi pressed the Korea Internet & Security Agency (KISA) on its role: “In this serious ‘Mitos Shock’ situation, what has KISA been doing?” He urged the government to produce effective, enforceable measures.