November 2023, it was reported that JAXA may have suffered a cyber-attack in the summer of 2023 that may have leaked confidential information on Japan’s space program. JAXA’s Active Directory (AD), the central server that manages the JAXA network, was illegally accessed, officials The leak was revealed by a person involved in the incident. the AD server was hacked, JAXA also discovered that it had been hit by a zero-day vulnerability while working with Microsoft to investigate a cyber attack on its systems in 2023.
The attackers used multiple unknown malware, making it difficult to detect the unauthorized access, according to JAXA. the initial intrusion into JAXA’s internal servers and computers was most likely done by exploiting a VPN vulnerability, after which the attackers expanded their unauthorized access and compromised the space The attackers then expanded their unauthorized access and compromised the space agency’s user account information. That account information was in turn used to access MS365 services.
この記事を書いた人 Wrote this article
Chris Nakagawa
Biographical Info: -Building international financial networks, head of IT infrastructure projects including networks. -Involved in international financial infrastructure consulting, operational design for a major telecom company in Hong Kong. - Experience as a security analyst, providing integrated security system solutions. - Expertise advisory services for planning security countermeasures against advanced cyber attacks, as well as supervisory services focusing on incident response. - Advisory for CISO/CTO/CEO security guidelines / policy creation. - Supervising for SOC/CSIRT - Speaker at international conferences, author of numerous books, etc. - Certification : CISSP/GIAC/GCIA/CEH