Japan to Simulate Cyberattacks with AI Amid Global PHP Vulnerability Crisis

iconFLASH AI
Share
AI summary iconSummary
Japan plans to simulate cyberattacks using AI to test system vulnerabilities, following global PHP security issues that disrupted banking, transport, and government services. Major firms including SoftBank and East Japan Railway suspended internet operations. Developers have rolled out fixes, urging rapid updates. The move aligns with broader CFT efforts to secure liquidity and crypto markets against exploitation.

Japan said on Friday that Japan will establish a team to simulate cyberattacks with AI and identify weaknesses in technology systems. Organisations are seeking to reduce risks from vulnerabilities in PHP, a programming language used across much of the internet. Japan's industry minister Ryosei Akazawa said defenders must consider how attackers think because a single weakness can allow an attack to succeed. Akazawa said defenders also need AI to anticipate and counter attacks.

Government and corporate websites worldwide went offline this week after the disclosure of critical PHP vulnerabilities triggered millions of hacking attempts. Website operators rushed to secure systems or temporarily shut systems down. Emergency shutdowns affected banking, airline, railway, tax and government services in locations ranging from Tokyo to Helsinki.

SoftBank said on Friday that SoftBank was suspending mobile emergency alerts while maintenance addressed a PHP vulnerability. SoftBank said customers would not receive earthquake early warnings, tsunami alerts, or disaster and evacuation information during the maintenance. Brokerage Nomura, lender Mitsubishi UFJ Financial Group, airline ANA and East Japan Railway temporarily halted some internet services as emergency precautions. Japan's Ministry of Finance, National Tax Agency and Meteorological Agency also halted some online services.

East Japan Railway said on Friday that some group services had restarted. East Japan Railway said the remaining services would return after safety checks. Nippon Paint said Nippon Paint had installed a security patch as a precaution. Nippon Paint said the company's website was operating again.

Trend Micro CEO Eva Chen said attackers were probably targeting businesses in Japan because those businesses maintain detailed records. Chen said AI had removed the language barrier that previously protected those records. Chen said Japan had become overly comfortable with existing infrastructure that Japan considered sufficiently secure. Cybersecurity experts have said AI enables attackers to automate vulnerability searches and phishing campaigns, making cybercrime quicker, less expensive and more difficult to detect.

PHP developers issued fixes on Wednesday for vulnerabilities that had remained in the software for years before AI helped uncover the vulnerabilities. PHP developers urged users to install updates immediately.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.