Skip to content
Surge in Cyber Incidents Targeting Japanese Web Systems

Surge in Cyber Incidents Targeting Japanese Web Systems

First seen 11 Oct 2026, 17:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 00:02 UTC
  • •119 incidents of data leakage reported in Japan as of October 6, 2026.
  • •CVE-2026-63030 is a critical vulnerability actively exploited since July 2026.
  • •Attacks are targeting a wide range of web systems, including those not previously considered high-risk.

As of October 6, 2026, Japan has reported 119 incidents of information leakage from corporate web systems, a significant increase since July 2026. This surge, accounting for 68% of the year's reported incidents, raises concerns among security experts due to its unusual nature compared to past cyberattacks. The incidents involve unauthorized access and data breaches affecting various sectors, including previously less-targeted systems like libraries and ticketing services. The increase in incidents is attributed to evolving attack methods, with a focus on exploiting vulnerabilities in web systems. Notably, CVE-2026-63030, a vulnerability with a CVSS score of 9.8, was publicly disclosed on July 17, 2026, and is. Organizations are struggling to obtain necessary information to bolster their defenses against these threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2017-03-07
Public exploit for CVE-2017-5638 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2021-05-10
CVE-2021-20717 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2021-10-26
CVE-2021-20837 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2024-06-07
Public exploit for CVE-2024-4577 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2026-07-17
CVE-2026-63030 published
A critical vulnerability affecting web systems was disclosed, with a CVSS score of 9.8.
security.macnica.co.jp
2026-07-17
CVE-2026-60137 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-63030 added to CISA KEV
CISA confirmed active exploitation of CVE-2026-63030, prompting heightened security measures.
security.macnica.co.jp
2026-10-06
Surge in cyber incidents reported
Japan reported 119 incidents of information leakage from web systems, marking a significant rise since July.
security.macnica.co.jp

More articles in this cluster (2)

Following this threat?

Track Infostealer and CVE-2017-5638 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 2

Common questions

What types of systems are affected?
Various web systems, including those used for libraries, ticketing, and member services, are affected.
How urgent is the situation?
The situation is critical, with a significant increase in incidents and active exploitation of vulnerabilities.
What steps should organizations take?
Organizations should review their web systems for vulnerabilities, especially CVE-2026-63030, and implement necessary security measures.