Tibero is a widely deployed South Korean database-management system whose vendor support site was compromised in a software supply-chain incident disclosed in 2025. Attackers replaced the Tibero 7 installer with a malicious file so customers downloading the product could be infected, then restored the legitimate installer to reduce the chance of detection. The product is used by roughly 1,400 government and major corporate customers, creating potential for broad downstream impact, although no customer compromise had been confirmed at the time of disclosure and the duration of the vendor intrusion remained undetermined.