Tag

Unauthorized Access

Articles about "Unauthorized Access"

4 articles

Lessons from Japan's 2026 Breaches (Part 1): AI-Driven Attacks and Protecting ID Documents

Twelve Japanese organisations disclosed breaches between June and September 2026. This first part lays out what each one officially said, what public statistics show they have in common, how AI and AI agents are changing the risk, and, using the Times Car disclosure as a starting point, how any company should think about storing and encrypting ID documents.

2026-09-30Ryuta Hamamoto

AI Security

Lessons from Japan's 2026 Breaches (Part 2): Endpoint Security and a Checklist for Small Firms

Part 2 of our look at the wave of unauthorized-access incidents disclosed in Japan in 2026. Using public guidance from Japanese and US agencies, it covers what companies can do now: patching VPN appliances, phishing-resistant MFA, PC and endpoint basics (EDR, disk encryption, admin rights, infostealers), backups, vendors and AI agents, what to do when a breach is found, and a prioritized checklist for small businesses.

2026-09-30Ryuta Hamamoto

AI Security

What the Digital Agency's GSS Breach Teaches Companies About VPN Patching

On 11 September 2026, Japan's Digital Agency disclosed unauthorized access to GSS, the shared work environment for government staff. The entry point was a publicly known VPN vulnerability rated "Medium". This piece walks through the official disclosure, why severity-ordered patching did not arrive in time, why VPN appliances have become the most common way in, why zero trust did not prevent it, and what any organisation can change this week.

2026-09-11Ryuta Hamamoto

AI Security

What Sakura Internet's Breach Disclosure Teaches Us | Designing for the Day Your Cloud Provider Is Compromised

In August 2026, Sakura Internet disclosed unauthorized access to its hosting environment and later to its sales management system. This is not a piece about what the company did wrong. It walks through why provider-side intrusions happen, what legal duties stay with the customer, and how to read the scope of an ISMAP registration before you rely on it.

2026-08-19Ryuta Hamamoto