"Ransomware" Articles (5)

Is On-Premises Really Safer? What the Cloud Comparison Reveals About Legacy Weaknesses

We test the claim that on-premises is safer because you own it, using public statistics. Japan's National Police Agency found that 66.3% of ransomware intrusions in 2025 came through VPN devices. This article explains why the dividing line is not where a system sits but whether it is kept up to date, and lists seven questions to ask when you receive a system proposal.

2026-11-12Ryuta Hamamoto

AI Security

Lessons From the GMO Breach: What Government, Companies and Individuals Should Do Now

This article lays out what happened in the October 2026 unauthorized access to GMO's Onamae.com Desktop Cloud, using GMO's official announcements and press reports, and then explains what we can learn from it in three roles: government, companies and individuals. It is written in plain language for beginners and ends with actions you can take today.

2026-11-06Ryuta Hamamoto

AI Security

Companies Quietly Leave a Country That Won't Hit Back: Japan's Active Cyber Defense Explained

What can the Japanese state do, and not do, under the active cyber defense framework that began in October 2026? Using the Asahi, Askul and GMO incidents, this beginner-friendly explainer shows how the burden falls on the company that was attacked, and how that could shape where companies choose to keep their data. It also weighs the strongest counterarguments and what government and companies can do.

2026-11-05Ryuta Hamamoto

AI Security

Hit by a Cyberattack in Japan? First Steps for Individuals and Companies

In late September and early October 2026, several major South Korean banks disclosed cyberattacks. If the same happened in Japan, what should customers and companies do first? Working from primary sources, this article covers self-reporting to Japan's three credit bureaus, police and consumer hotlines, the deadlines for breach reports to the Personal Information Protection Commission, and reporting under Japan's new active cyber defense law.

2026-10-04Ryuta Hamamoto

AI Security

Lessons from Japan's 2026 Breaches (Part 2): Endpoint Security and a Checklist for Small Firms

Part 2 of our look at the wave of unauthorized-access incidents disclosed in Japan in 2026. Using public guidance from Japanese and US agencies, it covers what companies can do now: patching VPN appliances, phishing-resistant MFA, PC and endpoint basics (EDR, disk encryption, admin rights, infostealers), backups, vendors and AI agents, what to do when a breach is found, and a prioritized checklist for small businesses.

2026-09-30Ryuta Hamamoto