Tokyo DispatchJapan, in EnglishThe group that advertises the world's strongest white-hat hackers took two and a half months to notice an intrusion, and says it still cannot explain why a vulnerability flagged by its own specialists was never fixed.
Junichi Miyagawa said the attack exploited a flaw in open-source software the company had never checked, and that stopping services to cut off intruders now takes priority.
The government will consider monitoring traffic between parties inside Japan, which the current law leaves untouched, after the prime minister ordered a review of the active cyberdefense law.
A cabinet meeting on Nov 6 approved a package to tighten corporate basics and strengthen "proactive cyber defense," after a run of breaches blamed on weak systems and misconfigured websites.
The government will announce emergency measures on Nov. 6, including a push to close vulnerabilities firms already knew about and defenses built on high-performance AI.
The National Police Agency and all 47 prefectural forces will investigate cyberattacks together, with a separate team formed for the breach at a GMO Internet cloud service.
Masatoshi Kumagai fronted the group's response to a major data breach himself. The apology became a monologue, and governance concerns showed up in the stock.
The government approved a package of emergency cybersecurity measures on Friday, including a unit of specialists to help hacked organizations and a push to define the legal footing for active cyber defense.
JNSA took its information-security quiz service offline after confirming the breach on November 4, and says it has not yet traced how the intruder got in.
The company's mail system for internet providers was breached on June 23, and its president told an earnings briefing that KDDI kept running an old system despite the scale of the leak.
The National Cybersecurity Office says it found multiple cases where basic safeguards were missing, and that AI is likely helping attackers find weak systems at scale.
