App flaws and AI tools fuel recent cyberattacks on Japanese companies

A recent analysis by Japan’s National Institute of Information and Communications Technology, under the communications ministry, identified weaknesses in smartphone applications as a likely cause of a spate of cyberattacks on Japanese firms. The institute noted that apps built for Google’s Android operating system have been specifically targeted, and warned that iOS apps could face similar threats. Researchers say attackers dissect app programs to locate server flaws and then employ automated techniques—potentially driven by artificial intelligence—to launch exploits that cause unintended actions or install malware.

Reported victims include the Times Car vehicle-sharing service, East Japan Railway Co., Yamaha Motor Co., and travel agency H.I.S., which revealed a leak of customer passport data. In response, the institute emphasized the importance of robust server design and operational security. The government has called on businesses to tighten defenses amid growing concerns over AI-enabled cyber threats.