Science & Tech · Cybersecurity · 2 hrs ago
App vulnerabilities may be behind cyberattacks on Japanese firms
Japanese firms have reported data breaches in recent weeks, including leaks of customer information.
The National Institute of Information and Communications Technology said attackers targeted apps made for Android, and apps for Apple devices may also be at risk.
Attackers studied how apps work to find weaknesses in company servers, then used them to trigger unintended actions or install malware and access confidential data.
AI may be helping automate the attacks, the institute said, though it described this as a possibility.
Firms affected include Times Car’s operator, East Japan Railway and Yamaha Motor; travel agency H.I.S. said passport information was leaked late in 2025.
Japan’s government has urged businesses to tighten security, and the institute said companies should design and operate servers safely because app weaknesses can be difficult to prevent from being discovered.
A Japanese research institute said vulnerabilities in smartphone apps may be behind a recent spate of cyberattacks on Japanese firms.
The attacks have led to multiple reports of data breaches and information leaks.
The institute said attackers targeted apps made for Google’s Android operating system and that Apple apps may also be attacked.
Researchers said attackers analysed app programmes to find server flaws and gain access to confidential data.
The institute said artificial intelligence may be used to automate the attacks.
- Who
- Japanese firms were targeted. The National Institute of Information and Communications Technology analysed the attacks.
- What
- App vulnerabilities may have enabled cyberattacks and data breaches.
- When
- In recent weeks, according to the article. One customer passport information leak was reported in late 2025.
- Where
- Japan.
- Why
- Attackers reportedly analysed app programmes to find server flaws and force unintended actions or run malware to access confidential data.
This story does not have two clearly opposing sides.
Major travel agency H.I.S. said customer passport information was leaked.
Reports of unauthorised access and information leaks prompted the government to urge businesses to tighten security.
The Straits Times published an article about the institute’s analysis of the attacks.
- Research institute
- Japan’s National Institute of Information and Communications Technology
- Targeted apps
- Apps made for Google’s Android operating system
- Firms named
- Times Car operator, East Japan Railway and Yamaha Motor
- Travel agency
- H.I.S.
- Reported leak
- Customer passport information, late 2025
What people are saying
it is important to design and operate servers in a way that secure safety
Based on the spread of these attacks, there is a possibility that AI is being used to automate them