Japan plans to seek early access to information about undisclosed software vulnerabilities from US artificial intelligence developers and other overseas technology companies, as the government responds to a rise in cyberattacks, the Nikkei newspaper reported.
The government is expected to present an emergency cybersecurity package at a ministerial meeting that could take place as early as November 6, according to the report.
- Japan is considering earlier access to information about critical software vulnerabilities from US AI developers and other foreign technology companies.
- The government could announce emergency cybersecurity measures as early as November 6, following widespread attacks exploiting PHP vulnerabilities.
- Japan is also developing AI-based cyberattack simulations to identify security weaknesses and improve infrastructure protection.
Prime Minister Sanae Takaichi instructed officials in late October to develop measures to strengthen national cyber defences following an increase in attacks.
The proposals would allow Japanese authorities to receive information about serious software vulnerabilities before public disclosure, giving government agencies and critical infrastructure operators more time to prepare protective measures.
PHP vulnerabilities trigger global cyberattacks
Japan’s plans follow widespread disruption in October after critical security vulnerabilities were disclosed in PHP, a programming language used extensively by websites and online services.
The disclosures prompted millions of attempted cyberattacks and affected government and corporate websites in several countries.
Some website operators were forced to temporarily shut down systems while implementing security measures.
The incidents exposed the difficulties organisations face when attackers begin exploiting newly disclosed vulnerabilities before affected systems can be secured.
Japan subsequently announced plans to establish a team that would simulate cyberattacks using artificial intelligence to identify weaknesses in technology systems.
The proposed early-warning arrangements would provide another way for authorities and infrastructure operators to prepare for potential attacks.
Discovered vulnerabilities in the PHP programming language have renewed concerns about systemic cyber risk, with AM Best, CyberCube and Moody’s Ratings warning that artificial intelligence could make software weaknesses easier to exploit across thousands of organisations.
The flaws, collectively known as PHP2Shell, affect technology widely used to operate websites and online applications. Their discovery illustrates the potential for a single software vulnerability to expose multiple insured businesses simultaneously, a concentration risk that has historically constrained cyber insurers’ willingness to expand underwriting capacity.
In separate assessments, the three organisations examined how AI is accelerating vulnerability discovery, shortening the time available for software providers to respond and increasing the possibility of widespread cyber insurance claims.
Japan seeks closer cooperation with OpenAI and Anthropic
Tokyo is exploring arrangements with foreign technology companies that would provide advance notice of serious software security flaws, Nikkei reported.
Japan has also recently sought expanded access to advanced AI models developed by major US companies, including OpenAI and Anthropic.
According to Nikkei, those discussions followed a series of cyberattacks suspected of involving AI-assisted techniques. The proposed measures would combine earlier vulnerability intelligence with AI-based security testing as Japan works to improve its ability to identify and respond to cyber threats.
The government has not yet announced the detailed terms of the proposed information-sharing arrangements or confirmed which foreign technology companies would participate.
