Do Son A CAPCOM ID data breach exposed 11.77 million records, including emails and login activity. No payment data was leaked.
Japan
Sakura Internet disclosed a breach of its customer management system affecting 1.36 million accounts, though passwords were hashed and salted and no ransom was demanded.
Cato CTRL details a new SilverFox ValleyRAT campaign in Japan using three BYOVD drivers and DLL sideloading to kill security tools.
JPCERT/CC details new APT-C-60 attacks on Japan. The group abuses Proton Drive, LNK files, and GitHub to deploy SpyGlace malware.
Trend Micro found TONResolver malware hitting Booking.com hotel partners in Japan. It hides its C2 in a TON blockchain smart contract. Details inside.
CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.
iOS 26.2 beta code suggests Apple is enabling third-party app stores in Japan to comply with new antitrust laws. Users report accessing AltStore & Epic Games Store.
JPCERT exposed APT-C-60 targeting Japan via VHDX LNK files in phishing emails. The SpyGlace malware uses GitHub to fetch encrypted commands and statcounter for victim telemetry.
Japan formally requested OpenAI to stop Sora 2 from infringing on its "irreplaceable" anime and manga IP after users generated videos of Dragon Ball and Pokémon.
Microsoft expanded its partnership with Shizen Energy, signing three new solar PPAs for 100 MW to power its cloud/AI infrastructure, accelerating Japan's energy transition.
A new Japanese law will force Apple to allow third-party browsers like Chrome and Firefox to use their own rendering engines on iOS, mirroring and expanding on the EU’s Digital Markets Act.
A new ransomware, KAWA4096, combines features from Qilin and Akira, targeting organizations in the US and Japan with multi-threaded encryption and anti-recovery measures.
Silver Fox APT is conducting a multi-stage espionage campaign, leveraging backdoored medical software like Philips DICOM viewers to infect healthcare organizations
Swan Vector cyber-espionage campaign uses sophisticated malware to target institutions in Japan and Taiwan. Learn how they evade detection and steal data
A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.
The CoGUI phishing kit uses advanced evasion to target Japan with high-volume campaigns impersonating Amazon, PayPay, and more.
Earth Kasha targets Taiwan and Japan in a March 2025 spear-phishing campaign using ANEL and NOOPDOOR backdoors for stealthy cyber espionage.
Japan’s antitrust watchdog sues Google for restricting Android device makers from using rival search services, citing monopolistic market practices.
Google faces regulatory challenges in Japan over antitrust allegations. Explore the accusations of stifling competition and limiting consumer choice in the search market.