Japan announced plans to establish a team that will simulate cyberattacks using artificial intelligence (AI) to identify vulnerabilities in technology systems, following recent disruptions caused by critical flaws in the PHP programming language. The PHP language, which supports a significant portion of the Internet's infrastructure, was found to contain long-standing security weaknesses that were exploited in widespread hacking attempts earlier this week.
The discovery prompted many government and corporate websites worldwide to temporarily shut down or restrict access to their online services to prevent breaches. In Japan, the impact was significant enough that SoftBank, the country’s third-largest mobile carrier with over 30 million smartphone users, suspended its emergency alert system. This suspension means that mobile users will not receive early warnings related to earthquakes, tsunamis, or other disaster and evacuation information while the system undergoes maintenance to address the PHP vulnerability. SoftBank noted that alternative warning services, including a Yahoo app, remain operational.
Japan faces heightened risks from natural disasters, being one of the most earthquake-prone countries globally, with typhoon Champi currently approaching Okinawa prefecture. The suspension of emergency alerts during a period of heightened natural disaster risk has raised concerns among officials and the public.
Industry Minister Ryosei Akazawa emphasized the importance of adopting a mindset that anticipates attacks by thinking like hackers. He highlighted the need for defenders to proactively use AI tools to stay ahead of cyber threats. However, some cybersecurity experts criticized the government's response as slow. Nobuo Miwa, president of Tokyo-based cybersecurity firm S&J Corp, described the reaction as inadequately prepared against the scale of the attacks.
The disruptions extended beyond telecommunications. Several major Japanese institutions, including brokerage Nomura, Mitsubishi UFJ Financial Group, airline ANA, East Japan Railway (JR East), as well as the Ministry of Finance, National Tax Agency, and Meteorological Agency, suspended various online services as precautionary measures. JR East has since restored some services, with others pending safety verification, while companies like Nippon Paint applied security patches and resumed normal operations.
Expert observers note that Japanese businesses may be attractive targets due to their comprehensive record-keeping practices, which, because of AI-powered language translation, no longer benefit from a language barrier. Eva Chen, CEO of cybersecurity firm Trend Micro, remarked that Japan’s reliance on existing infrastructure created a false sense of security.
Cybersecurity analysts warn that AI is increasingly aiding attackers by automating vulnerability scanning and optimizing phishing attacks, thereby accelerating and economizing cybercrime. Following the vulnerabilities’ exposure, PHP developers released security updates on Wednesday, urging users worldwide to implement patches immediately to mitigate risks posed by these flaws.