Japan
Breaches, attacks and alerts in Japan.
What to Do After a Data Breach: Why a Password Reset Is Not Enough, and the Steps for Each Type of Leaked Data
A new password only fixes a leaked password. Here is what government guidance says to do when card numbers, Social Security numbers, IDs or contact details leak, and what a company should put in its breach plan.
Ransomware Business Continuity: Why Backups Alone Won't Keep Your Company Running, and What to Do This Week
Backups can bring systems back, but they do not keep work moving during the outage. Here is what Japan's IPA learned from ransomware victims, what is not known, and what to check this week.
Amadeus Data Breach: Airline Booking Records and Some Passport Numbers Exposed, What Is Confirmed and What to Do This Week
Amadeus says a flaw exposed booking data, and airlines including Japan Airlines, ANA, Cathay Pacific and Singapore Airlines report customer records were accessed. Here is what is confirmed and what businesses should do.
Does MFA Stop Stolen Passwords? What 19,252 Unauthorized Brokerage Access Cases in Japan Show About Phone Codes and Passkeys
Japan's regulator counted 19,252 unauthorized access cases at online brokerages in 21 months. Phone MFA blocks a leaked password on its own, but typed codes can still be stolen on fake sites. Here is what to change this week.
Sogou Input Method Backdoor: Hijacked Updates Installed DarkVigil Malware (CVE-2026-120422), and How to Check Your PCs
A China-aligned group hijacked plain HTTP traffic from Sogou Input Method for Windows to install the DarkVigil backdoor. The flaw, CVE-2026-120422, is fixed in version 16.10. Here is what is confirmed and what to check.
Sony So-net Data Breach: 2.58 Million Member Records and 54,401 Mail Passwords Exposed, and the Vendor Checks Businesses Should Run
Sony Network Communications says an attacker reached its So-net member database and took data on 2,585,481 current and former customers, plus 54,401 mail passwords. Here is what is confirmed, what is not known, and what to check.
Japan Airlines Data Breach: 92,000 Customers Exposed Through Amadeus, and the Vendor Checks Businesses Should Run
JAL says booking details for about 92,000 customers were viewed through Amadeus, the outside company that runs its reservation system. Here is what is confirmed, what is not, and the vendor checks to run this week.
PHP2Shell Attack: How 25 Servers Were Rooted, Including a U.S. Government Network
An attacker chained PHP2Shell with a Linux kernel flaw to root 25 servers, most of them internet-facing firewalls, including three systems in a U.S. government-affiliated network. What happened step by step, what is confirmed and what is not, and what to check on your own network.
