Critical Japanese Government Systems Lack Security Controls
Summary
Hide β²
Show βΌ
Japan's Board of Audit identified 58 critical government systems lacking appropriate security controls and management. This comes as the country faces increased cyberattacks, with 447 incidents reported in 2024. Key targets include government systems, with nation-state actors and cybercriminals exploiting vulnerabilities and conducting cyber-espionage and cyber-physical attacks. The threat landscape includes attacks from Chinese and North Korean groups, targeting both government and commercial sectors. The Japanese government is enhancing its cybersecurity posture through legislation and international cooperation, but significant gaps remain in securing critical infrastructure.
Timeline
-
24.09.2025 03:00 π° 1 articles Β· β± 15h ago
58 Critical Japanese Government Systems Lack Security Controls
Japan's Board of Audit identified 58 critical systems at a dozen government agencies that lack appropriate security controls and management. This revelation comes amid a surge in cyberattacks, with 447 incidents reported in 2024. The findings highlight significant vulnerabilities in Japan's cybersecurity infrastructure, particularly in government systems. The report also notes that 259 of 356 critical systems lack business continuity plans, further exacerbating the risk. Nation-state actors, including Chinese and North Korean groups, are actively targeting Japanese systems, conducting cyber-espionage and cyber-physical attacks.
Show sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
Information Snippets
-
58 critical systems at a dozen government agencies lack appropriate security controls and management.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
447 cybersecurity incidents were reported in Japan in 2024, more than double the previous year.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
The MirrorFace campaign has likely led to critical data loss in Japan.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
Chinese and North Korean APT groups are actively targeting Japanese government and commercial sectors.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
Japan passed the Active Cyber Defense Bill in May 2025, allowing law enforcement to respond with active measures against foreign attacks.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
The Board of Audit found that 259 of 356 critical systems lacked business continuity plans.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00
-
A vulnerability in PHP CGI on Microsoft Windows systems was exploited to install Cobalt Strike reverse proxies in Japan.
First reported: 24.09.2025 03:00π° 1 source, 1 articleShow sources
- As Incidents Rise, Japanese Government's Cybersecurity Falls Short β www.darkreading.com β 24.09.2025 03:00