Macnica Attack Surface Management
Macnica Attack Surface Management
OSG Corporation
Strengthening governance across the entire group, including overseas
- It is now possible to discover previously unknown assets and risks that would have been impossible with analog methods.
- Prioritize your efforts to address important issues with limited resources
- Starting with Macnica ASM, the group's responsible person and contact information are clearly defined
OSG Corporation
IT Strategy Department Manager
Mr. Tsuyoshi Harada
A serious incident occurred due to a vulnerability in the VPN of an overseas group company, and the company's core system was infected with ransomware.
OSG, headquartered in Toyokawa City, Aichi Prefecture, is a comprehensive tool manufacturer whose main business is the manufacture and sale of machining tools. The tools that the company provides, including taps, which boast the world's top market share, as well as drills, end mills, dies, etc., are used in a variety of industries, including automobiles, molds, aerospace, energy, heavy industry and construction machinery, and its reliable technical capabilities support the global manufacturing industry.
With a corporate philosophy of being a "global company," the company has been expanding its business overseas for over 40 years since establishing its first subsidiary in the United States in 1968. Currently, the company has a network of 41 domestic locations and 53 manufacturing and sales bases in 35 countries. As the number of overseas locations grew, governance became insufficient, raising security concerns. For example, even if a group company had implemented its own SSL-VPN, there was no way for the Japanese side to accurately verify its configuration. Mr. Harada, head of the company's IT Strategy Department, explains, "In addition to security measures, we conducted annual interviews and compiled information on group company IT assets in the form of an information management ledger. However, this was only a snapshot of the situation at that time, and in reality, equipment replacements and other changes occurred during the process of compiling the list, which meant that it lacked real-time functionality."
In this situation, the company suffered multiple cyberattack incidents. One of the most serious incidents occurred in April 2023, when a core system server was infected with ransomware, encrypting all files on the server. An investigation revealed that a vulnerability in a VPN set up by a group company in Singapore for employees to work remotely had been exploited, allowing an attacker to infiltrate the head office via publicly available assets. "The head office was aware of the existence of the VPN, but they had no control over the scope of access it had been made available to, or whether patches were being applied properly. Learning from this incident, we realized that simply strengthening Japan's defenses was not enough, and we decided to prioritize addressing any areas across the entire group that could potentially serve as entry points for intrusions," says Harada.
Customer story 1st page sample
User Profile
| OSG Corporation | |
| location | 3-22 Motonohara, Toyokawa City, Aichi Prefecture |
| Introduction time | November 2024 |
| URLs | https://www.osg.co.jp |
| The company is a comprehensive tool manufacturer that produces and sells end mills, drills, rolling tools, and other products, with globally competitive taps as its core product. Based on its corporate philosophy of being a "global company," the company has established a manufacturing, sales, and technical support system in 35 countries around the world, providing high-quality, high-performance products and comprehensive support to customers around the world. In recent years, the company has also been working on the development of cutting-edge technologies that capture the needs and seeds of future technology, such as research into new materials and the latest coating technologies, and environmentally friendly products. | |
Inquiry/Document request
Macnica Macnica ASM
- TEL：045-476-2010
- E-mail：sec-service@macnica.co.jp
Weekdays: 9:00-17:00