Japan has introduced an emergency cybersecurity package after a series of attacks exposed personal data and heightened public concern. The measures follow high-profile breaches, including an attack on internet provider GMO Internet Group that involved a ransom demand. The package sets out four priorities: use artificial intelligence to strengthen basic security and find system vulnerabilities; improve the collection and analysis of threat information; develop a strategic response to attacks; and help victims limit damage and recover. The government says it aims to build a resilient society in which public and private organizations share information and receive prompt support.
The plan calls for a specialist “top gun” team to counter hackers, with AI and cooperation with overseas technology companies used to keep vulnerability information current. Separate public-private teams will advise businesses at risk and provide on-site help to those already attacked. Officials also intend to use “active cyber defense,” newly enabled by a law that took effect in October, to access servers used by attackers and disrupt threats. For incidents with serious national-security implications, a support team drawn from cybersecurity, police and defense agencies will be dispatched. The government has also allocated 10 billion yen, about $63 million, from its 2026 budget reserves, including funding to upgrade police intelligence-gathering and analysis equipment.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A URL-encoding flaw in Hugging Face Chat let unauthenticated requests bypass an admin check and trigger bulk exports of users’ private conversations. The exported data was sent to a configured dataset destination rather than returned directly to the requester. (twitter.com)
Claude Code’s “Don’t Ask Again” setting was linked to passwords and other secrets being exposed in 1,122 public GitHub files. The finding highlights how coding-agent features can accidentally put sensitive data into public code repositories. (apiiro.com)
Hackers stole $133 million from a French bank by targeting a service provider. The available details do not explain how the attack was carried out. (bleepingcomputer.com)
U.S. intelligence reportedly believes Nvidia CEO Jensen Huang had a romantic relationship with suspected Chinese spy Alice Huang, who allegedly sought access to restricted AI chips. Alice Huang is linked to Megaspeed, whose subsidiary faces allegations of smuggling $2 billion in AI chips into China. (tomshardware.com)
A report alleges China is linked to at least 18 overseas police stations in Canada, including three in the Greater Toronto Area. The RCMP is investigating reports of criminal activity connected to the stations. (ctvnews.ca)
Colframe is a low-interaction honeypot that imitates supermarket refrigeration controllers from Danfoss and Dixell. It is designed to attract and observe activity targeting these systems, including Modbus-based threats. (github.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.