Tokyo Dispatch
Tech
Tokyo DispatchJapan, in English

Japan to unveil emergency cyber defense package on Nov. 6

The measures bundle advice for companies, AI-assisted vulnerability hunting and staffing for active cyber defense, after a run of breaches and unauthorized access.

By Newsroom1 min read
Japan to unveil emergency cyber defense package on Nov. 6
Prime Minister Sanae Takaichi, second from the front left, speaks at the first meeting of the ministerial council on cybersecurity, at the Prime Minister's Office at 6:19 p.m. on October 26, 2026. Asahi Shimbun (x)

The government will publish an emergency package of cyber defense measures on Nov. 6, officials have decided, as leaks of information through unauthorized access keep coming. The package aims to make it easier for companies to defend themselves, chiefly by centralizing advice and information on protective measures and by promoting the use of artificial intelligence to find vulnerabilities in systems.

Multiple government officials disclosed the plan. The government will convene a meeting of cabinet ministers responsible for cybersecurity at the prime minister's office on Nov. 6 and is still working out the details to include.

The package is being drawn up to cover stronger analysis of damage reports and stronger consultation services across ministries, stronger cybersecurity at medical institutions, and the training and recruitment of security personnel. It is also set to cover the use of AI by companies to find and fix vulnerabilities.

Active cyber defense staffing

The government is also considering strengthening the setup for active cyber defense (ACD), which aims to stop attacks before they land. A law on ACD took effect in October, allowing police and the Self-Defense Forces to enter the computers behind an attack and take measures to render them harmless.

The package is being adjusted to include steps such as securing the personnel needed to carry out ACD. The government carries out ACD when it judges that leaving an attack alone could cause serious harm to life, body or property. It intends to proceed cautiously, however, because the measures involve entering another party's server.

Even when ACD is carried out, the details will not be made public. The government will only report to the Diet once a year.

The government held the first meeting of the ministerial group on cybersecurity on Oct. 26. Prime Minister Sanae Takaichi instructed those present to put the emergency package together.