House byline
Security correspondent
Daiki Yamamoto is a house byline for InfoHandle’s Security desk.
The Information-technology Promotion Agency issued an emergency bulletin Tuesday urging immediate patches for FortiGate SSL VPN flaws after Hyogo prefectural offices reported unauthorized access traced to an unpatched edge device.
The Japan Fintech Association warned merchants and shoppers about PayPay QR overlay scams at festival stalls during the Sports Day long weekend, describing cases where criminals paste fake payment codes over legitimate ones to redirect transfers.
Police say reissuing licenses will not stop misuse of stolen data after Times Car lost facial images and license records for about 1.6 million customers; the National Police Agency is urging banks to tighten identity checks.
Tokyo Metropolitan Police said cybercrime units seized infrastructure hosting 890 cloned National Tax Agency login pages, warning Sports Day travelers not to tap SMS links that demand My Number credentials.
Rakuten Mobile patched an orchestration API flaw that JPCERT/CC flagged in a coordinated disclosure, closing a path that could have let authenticated partners reassign subscriber profiles without secondary approval.
Four people were hurt, none seriously, when a diplomatic-plate car leaving Japan’s Foreign Ministry collided with a civilian vehicle on Sakurada-dori in Kasumigaseki on Thursday evening.
National Police Agency chief Yoshinobu Kusafuka urged stronger passwords and identity checks after a Nikkei phishing blast and the Times Car leak.
Lt. Gen. Benjamin Watson ordered every U.S. service member on Okinawa to stand down from noon Wednesday through Friday after police arrested a Futenma-based lance corporal in the death of a Naha woman, then imposed a 30-day liberty curfew.
Japanese police handed a Russian national linked to the Qilin extortion crew to German authorities after locating him in Japan on a warrant tied to a ransomware attack on a German firm.
Japan’s cyber center warned that animated fake brokerage apps are tricking retail investors into wiring margin collateral to scam accounts.
NISC’s latest advisory warns that polished fake brokerage apps with cartoon mascots are luring Japanese margin traders into deposit scams that mimic licensed securities interfaces.
Japan’s National center of Incident readiness and Strategy for Cybersecurity warned that fraudsters are using lightweight animation in fake securities apps to mimic live margin balances.
The Financial Services Agency urged banks to shorten unauthorized-transfer reporting cycles after autumn phishing campaigns mimicked major lenders’ login pages.
About 220 people toured launchers and ammunition trucks at Camp Kengun on Saturday as the Defense Ministry opened its Type-25 deployment to residents for the first time since the long-range system arrived in March.
Japan’s Digital Agency ordered spot audits of municipal VPN appliances after credentials stolen from a Kagawa town hall appeared on a criminal marketplace.
The U.S. military intends to move its Navy-Marine Expeditionary Ship Interdiction System to Yonaguni during Keen Sword later this month, a first for the island that sits roughly 110 kilometres east of Taiwan.
Statutes enacted last year took effect Thursday, letting police and the Self-Defense Forces disable foreign servers and requiring critical-infrastructure operators to report breaches to Tokyo.
Osaka prefectural police counted 4,200 PayPay-linked QR skimming reports in the July–September quarter, warning that fake payment stickers on vending machines surged ahead of holiday travel.
Osaka's prefectural cyber police counted 4,200 PayPay QR tampering reports in the third quarter, triple the year-earlier pace as festival season foot traffic peaked.
Hyogo prefectural police detained a person believed to know the circumstances after a shooting report in central Kobe left one man dead from an abdominal wound.
JPCERT/CC warned that cloned SoftBank corporate SIM provisioning portals are harvesting MFA tokens from logistics firms rushing October handset refreshes ahead of the extraordinary Diet session travel spike.
Japan’s National Center of Incident Readiness and Strategy for Cybersecurity urged manufacturers to air-gap CNC job files after a Chiba metal shop lost a weekend of production to ransomware that spread through a shared file server.
Tokyo says U.S. Typhon launchers will leave Kanoya for Kadena by mid-October, stressing the move is storage—not a permanent deployment on Japanese soil.
Japan Coast Guard patrols confronted a Chinese marine research ship inside Okinawa’s exclusive economic zone Sunday and demanded an immediate halt to apparent seabed sampling.
The Japan Coast Guard said a Chinese state research ship conducted apparent seabed work inside Japan’s exclusive economic zone north of Ishigaki Island on Sunday and was ordered by radio to stop.
Japanâs National Police Agency said financial losses from SMS phishing doubled in September as criminals cloned Japan Post Bank login pages and paired them with voice calls.
Keio Electric says ransomware reached group-wide servers behind its hotel and retail businesses, while the systems that run its trains sit on a separate network. What is confirmed, what is not, and which Japanese agency now holds the case.
Kyodo News reports a Japan-U.S. bilateral drill starting in October will involve Japan's long-range missiles — an alliance signal, with the missile type, venue and firing plan still unconfirmed.
The NPA warns that September SMiShing messages are steering users to fake Japan Post Bank and My Number portal login pages, and police have not named suspects or published a consolidated loss figure.
Tokyo Metropolitan Police said detectives arrested multiple people suspected of selling forged residency records through encrypted messaging apps, attributing the alleged ring to organized listings of my-number and residence certificate images buyers used for fraudulent account openings.
Japan’s National Police Agency said investigators searched locations linked to websites that mimicked Chiba prefecture typhoon relief portals after Typhoon Dujuan, warning households to verify official donation URLs before Silver Week giving campaigns peak.