AI Security
What the Digital Agency's GSS Breach Teaches Us | When a "Medium" VPN Flaw Gets Exploited, How Should Companies Patch and Connect?
On 11 September 2026, Japan's Digital Agency disclosed unauthorized access to GSS, the shared work environment for government staff. The entry point was a publicly known VPN vulnerability rated "Medium". This piece walks through the official disclosure, why severity-ordered patching did not arrive in time, why VPN appliances have become the most common way in, why zero trust did not prevent it, and what any organisation can change this week.
2026-09-11Ryuta Hamamoto