Macnica Provides Macnica ASM to OSG to Support Strengthening Global Security Governance ~Visualizing External Attack Surfaces and Responding to Critical Vulnerabilities with Small Operations~

Macnica (Headquarters: Yokohama City, Kanagawa Prefecture, Representative Director and President: Kazumasa Hara, hereinafter referred to as "Macnica") has announced that it has announced that it will provide Macnica 's in-house developed solution, Macnica Attack Surface Management (hereinafter referred to as "Macnica"), to OSG Co., Ltd. (Headquarters: Toyokawa City, Aichi Prefecture, Representative Director and President: Shinro Osawa, hereinafter referred to as "OSG") ASM^)*.

Background and Issues
Cyber attacks originating from publicly available assets are on the rise, and for companies with many overseas bases and group companies, inadequate management of publicly available assets is becoming a serious issue.
OSG, a comprehensive tool manufacturer, had been attempting to manage publicly available assets by conducting annual interviews with group companies and creating IT asset ledgers, but this lack of real-timeness and comprehensiveness made it difficult to properly understand risks. In 2023, OSG experienced a serious ransomware incident that had spread to the headquarters' core system, with the VPN of an overseas group company serving as an intrusion route. This incident prompted the company to urgently need to create a system that could visualize assets globally and identify attack routes.

■Reasons for choosing Macnica ASM
Macnica ASM is a solution developed in-house by Macnica that allows you to investigate and identify externally exposed assets from an attacker's perspective and gain a comprehensive view of potential risks.
OSG chose Macnica ASM for the following reasons:
• Identify assets and vulnerabilities with high accuracy without prior information
• Automatically detects unknown domains and assets, greatly streamlining traditional analog collection
• Low overdetection and prioritized response with limited resources
• Prioritize VPN assets that can be attack vectors and ensure efficient security measures

■Effects of implementation
Since the system officially began operation in November 2024, OSG has confirmed the following benefits:
• ASM's automatic collection function allows even a small team to identify hundreds of vulnerabilities.
• Establish a prioritized management system for VPN assets, enabling rapid response to critical risks.
• Key contact persons at each group company have been identified, and optimal communication paths have been established.
• Establish operational rules for vulnerability response, with immediate response for "Critical" alerts and regular updates for "High" and below.
• Reduce costs by reducing forensic response and improving operational efficiency
Furthermore, by creating a skills map based on Macnica ASM, we are also improving the effectiveness of governance, including at our overseas bases.

■ Future outlook
OSG is currently prioritizing measures for VPN assets, but plans to expand the scope and gradually address other vulnerabilities in the future. By clarifying the priorities of public asset and vulnerability information collected by Macnica ASM and prioritizing the management of assets with the highest risk of compromise, OSG aims to improve the security maturity of the entire group.

<Vulnerability management using Macnica ASM>
Macnica ASM's vulnerability prioritization uses advanced threat intelligence to determine which vulnerabilities have the potential to be exploited and pose "true risks that need to be addressed," and informs customers of these.

Through the provision of Macnica ASM, Macnica will contribute to the proper management and correction of vulnerabilities of externally disclosed assets, which currently account for 80% of ransomware damage, and help reduce the damage caused by cyberattacks and realize effective and sustainable security operations for enterprises.

＊：Macnica Attack Surface Management
Macnica was one of the first Japan to offer its self-developed ASM solution in June 2021. Macnica Attack Surface Management provides accurate and comprehensive research by using proprietary AI-driven tools that leverage the knowledge of the Macnica Security Research Center, as well as expert research when needed. It is now possible to identify assets including overseas bases, such as domains and stray servers that customers do not know themselves, and effectively deal with high-risk assets based on unique risk indicators that take into account attacker trends.
For more information, please visit the website. https://www.macnica.co.jp/business/security/manufacturers/macnicaasm/asm.html

[Click here for details of the case]
URL: https://www.macnica.co.jp/business/security/manufacturers/macnicaasm/case_09.html

[For product inquiries, please click here]
Macnica ASM, Inc.
TEL: 045-476-2010
E-mail: sec-service@macnica.co.jp

*Company names and product names mentioned in the text are trademarks or registered trademarks of Macnica and the respective companies.
*Information published in this news release (including product prices, specifications, etc.) is current as of the date of publication. Please note that it may be subject to change without notice.