LAC publishes "LAC Security Insight Issue 8, Spring 2024" published by security experts LAC Security Insight Issue 8, Spring 2024

LAC Corporation (Headquarters: Chiyoda-ku, Tokyo; President & CEO: Itsuro Nishimoto; hereafter, "LAC") has been providing a wide range of security services, including the "Security Monitoring Center JSOC," which is on the front lines of cyber attack threats, the "Cyber Emergency Center," which provides relief to organizations affected by cyber attacks, and the "Digital Pen Testing Department," which conducts simulated penetration tests of customers' systems, incorporating attackers' cyber attack methods. The "LAC Security Insight No. 8 Spring 2024" was released on May 24, 2024, and summarizes "insights" into recent threat trends and characteristics obtained through analysis, research, and penetration testing by security experts from the "Digital Pen Testing Department," which conducts simulated penetration testing of customer systems using attackers' cyber-attack methods. LAC Security Insight No. 8 Spring 2024" was released on May 24, 2024.

LAC Security Insight Issue 8 Spring 2024

https://www.lac.co.jp/lacwatch/report/20240524_003999.html

LAC Security Insight Issue 8 Spring 2024

This report is rooted in actual attacks and incidents that occur on a daily basis and focuses on threats to Japanese companies and organizations, allowing cybersecurity professionals at Japanese companies and organizations to understand the cyber attacks and threats facing their organizations.

Cyber 119 incident trends

Cyber 119 dispatch trends: January - March 2024

During this period, 30% of the incidents were related to malware, and 47% were related to server intrusion, accounting for 77% of the total. While malware-related incidents were similar to the previous quarter (October to December 2023) and the same period last year (January to March 2023), server intrusion incidents increased compared to the previous quarter (35%) and the same period last year (40%).

● Cyber attack trends observed by JSOC

Topics of Major Incidents: January-March 2024

The total number of critical incidents (security incidents in which a successful attack has been confirmed or damage is likely to have occurred, regardless of the number of detected incidents) that occurred during this period was 120.

Of these, 19 (16%) were incidents involving attacks from the Internet and 101 (84%) were incidents involving communications from inside the network, both of which increased compared to the previous quarter.

Special Feature: Threat Trends from Penetration Testing

Penetration testing is a method of identifying potential threats that are difficult to recognize by "conducting a simulated attack on the target system to verify whether the attacker's objectives can be achieved. The "attack scenario" that defines the content of the attack is indispensable in conducting a simulated attack, and we will explain the trends in attack scenarios (threats of high interest to customers) in the penetration tests conducted in FY2023.

LAC Security Insight Issue 8 Spring 2024 Table of Contents

Introduction

Trends in Cyber 119 incidents

Cyber Attack Trends Observed by JSOC

Special Feature: Threat Trends from Penetration Testing

About LAC Corporation

https://www.lac.co.jp/

Lack provides services to solve various social and business issues with its rich experience and state-of-the-art technologies in cyber security and system integration. Since its inception, the company has been involved in the development of fundamental systems that support Japanese society, such as those in the financial and manufacturing industries. In recent years, it has also been involved in the latest IT services suited to the DX era, such as AI, cloud computing, and teleworking. Since launching Japan's first information security service in 1995, we have been at the forefront of the latest cyber-attack countermeasures and incident response, including JSOC, one of the largest security monitoring centers in Japan, cyber emergency center, vulnerability assessment, penetration testing, and IoT security. LAC is a leading company in the information security field.

LAC and LAC are registered trademarks or trademarks of LAC Corporation in Japan and other countries.

All other company names, organization names, product names, etc. mentioned herein are registered trademarks or trademarks of their respective companies.

All information is current at the time of publication and is subject to change without notice. Information is subject to change without notice.