With AI accelerating vulnerability discovery, traditional security operations that constantly pursue every vulnerability are reaching their limits. Meanwhile, risk management of publicly accessible assets, which are a major entry point for ransomware, remains a crucial measure. In this context, what criteria should be used to select an Attack Surface Management (ASM) system? This video explains three key selection points—"accurately finding vulnerabilities," "identifying truly dangerous risks," and "carrying out the entire process"—based on government guidance from Japan, the US, and the UK, as well as the latest approaches to vulnerability response. This video will provide valuable insights for reviewing your ASM system, not only for those considering implementing it, but also for companies that have already implemented ASM and are facing challenges such as "too much noise and alerts, making it difficult to operate," "inability to prioritize risks," and "slow progress in resolving risks even after they are found." Please take this opportunity to watch the video.

In recent years, the evolution of frontier AI, including Mythos, has led to rapid changes in the number of vulnerabilities discovered and the speed of attacks. As a result, traditional countermeasures are no longer sufficient, and the security measures that need to be considered have changed significantly. This video organizes the overall picture of threat trends and attacks in the AI era and explains in detail the security measures necessary to address the emerging challenges. You will gain hints on what to prioritize within your company's limited resources, depending on your situation. [What you will learn from this video] "Why is Mythos causing such a stir?" "How will security measures change with the rise of AI?" "Specific examples of security measures that IT system administrators should address first."

As the number of vulnerabilities disclosed by Frontier AI continues to increase, traditional operational methods such as "checking all detected vulnerabilities" and "addressing them in order of highest CVSS score" are reaching their limits. In this context, the "BOD 26-04" issued by the US CISA in June 2026 indicated the importance of prioritizing based on actual risk. This video will explain the contents of "BOD 26-04" in an easy-to-understand manner and organize the thinking necessary for Japanese companies to implement risk-based operations. In particular, we will focus on understanding publicly available assets, which is a prerequisite, and introduce the direction of vulnerability management that will be required in the future.

Amidst the rise in ransomware attacks, externally exposed assets such as VPN devices and RDPs remain key entry points. Furthermore, advancements in frontier AI are likely to accelerate the speed of vulnerability discovery and exploitation, making traditional operations that track all assets and vulnerabilities with the same priority insufficient. Considering the future threat landscape, understanding and managing externally exposed assets using ASM (Asset Management System) is a critical issue that companies should prioritize. However, simply "finding assets" is not enough. Based on the ever-changing attack trends, it is essential to accurately identify high-risk assets and concentrate limited resources on high-priority responses—essential use of ASM is crucial. This video explains why comprehensive understanding of externally exposed assets and risk-based prioritization are important now, taking into account ransomware intrusion trends and changes in the threat landscape due to AI. In addition, based on the expertise of Macnica, which has been ranked No. 1 in the domestic ASM market for four consecutive years*, we introduce the key points that Japanese companies should consider when implementing or reviewing ASM, and the features of ANTERAS ASM. *Based on ITR Corporation's market research report, "ITR Market View: Cybersecurity Consulting Services Market 2025" (published December 2025).

In ransomware attacks, not only are vulnerabilities exploited, but leaked authentication information is also a crucial entry point. Once IDs and passwords are leaked, they can become the "key" for attackers to gain access to a company's network. In recent years, dark web research has gained attention as a countermeasure against such threats. Dark web research investigates and identifies whether a company's IDs, passwords, and authentication information have been leaked or traded, allowing attackers to grasp the fact of a leak before they can act. It is increasingly being used as a proactive defense measure. This video will organize the flow of ransomware attacks and explain typical patterns in which leaked authentication information is exploited. Furthermore, it will introduce the information that can be obtained through dark web research and points that should be checked in conjunction with ASM (Attack Surface Management). Please watch this video as an opportunity to re-examine how your company appears to attackers.

"Even with multiple ransomware countermeasures in place, why does the anxiety persist?" The answer lies not only in responding after an intrusion, but also in creating a state that is less susceptible to attacks. In this seminar, based on the reality of ransomware attacks, we will focus on attack methods such as risks to publicly accessible assets, misuse of leaked authentication information, and bypassing existing countermeasures (EDR, etc.), and explain the concept of ROC (Risk Operation Center), an operational model that reduces the overall amount of attack risk. You will take away practical insights that will help you organize what needs to be reviewed to create a state that is less susceptible to attackers.

In the second half of 2025, various security incidents made headlines. Many of these stemmed from publicly accessible assets, resulting in ransomware attacks that threatened business continuity and the need to address N-day vulnerabilities in widely used JavaScript libraries. This likely caused concern among many companies regarding their own security measures. While Attack Surface Management (ASM) is commonly used to detect risks in such publicly accessible assets, its operation presents various challenges. This seminar will explain the incidents and N-day vulnerabilities that occurred in the second half of 2025, and will also discuss common challenges and solutions when using ASM in operations.

Collecting and addressing vulnerability information is not easy. In fact, more than 48,000 CVEs (Common Vulnerabilities and Exposures) were registered between January and December 2025. This is more than 20% more than the 40,000 recorded in 2024 (according to Macnica). While many organizations prioritize their response efforts based on CVSS scores, this approach may overlook vulnerabilities that are actually being exploited by attackers. The current trend in vulnerability management is "risk-based vulnerability management," which takes into account factors such as whether a vulnerability has actually been exploited and whether it is likely to be exploited. Furthermore, when addressing vulnerabilities, it is essential to manage whether the company owns any devices with vulnerabilities. In this seminar, we will look back at the vulnerabilities that were actively exploited in 2025 and provide tips on how to escape the overwhelming vulnerability burden, prioritize your company's assets based on risk, and address vulnerabilities appropriately.

In recent years, cyber-attacks targeting externally exposed servers have increased rapidly. 511 cases of ransomware attacks were confirmed in Japanese companies and organizations between May 2020 and September 2024 (according to Macnica), and most of them were caused by vulnerabilities in externally exposed servers and intrusions via improperly exposed remote desktops. Many of these attacks are the result of vulnerabilities in externally exposed servers or improperly exposed remote desktops. To prevent such attacks, it is essential to first understand the attacker's modus operandi and take countermeasures accordingly. This video explains in detail why external public assets are being targeted now and how attackers are getting in, including an attack demonstration. In addition, the most effective countermeasure points that can be seen only from an attacker's point of view will be presented. This is a valuable opportunity to experience the attacker's thought process through the attack demo. Please come and watch.

Nowadays, organizations' IT assets are widely dispersed both inside and outside the company, making it difficult to manage them using traditional methods and making them targets for attackers. To address this situation, "Continuous Threat Exposure Management (CTEM)" is gaining attention. CTEM is an effective way to continuously discover and improve risks in response to ever-changing environments and threats. This seminar will explain the basic concepts of CTEM, the implementation steps, and how to get started using ASM, with specific examples. Let's take the first step toward continuous threat preparedness.

Recently, attack methods have changed, and attacks targeting publicly available assets for which countermeasures have not yet been implemented are becoming more common. In fact, the National Police Agency's threat trend survey showed that 81% of incidents were caused primarily by publicly available assets. The Ministry of Economy, Trade and Industry will publish ASM implementation guidance in 2023, and companies are beginning to seriously consider implementing ASM. However, implementing ASM to manage publicly available assets requires identifying and managing assets managed by affiliated companies and other departments, so many companies are struggling to make progress. In this session, we will invite three companies that are putting ASM into practice, and they will discuss their daily operations, challenges, and success stories, incorporating case studies from many companies that Macnica has supported.

Recently, there are many people who feel that there are more opportunities to see security incidents related to ransomware damage and information leaks at various companies. The background to this is that servers (especially RDP) and network devices (especially VPN) that are open to the public and have insufficient management and vulnerability countermeasures at their own company, subsidiaries, and overseas bases, etc. There are situations where it is being exploited as a fourth intrusion vector to follow. In March of this year, we were damaged by a major company's supply chain VPN infringement, which led to a serious situation of a large-scale stoppage of the factory line. In this video, we will explain in an easy-to-understand manner the background of the recent surge in incidents and the techniques used by attackers. On top of that, as the first step in the measures that each company should implement now, a solution that identifies and visualizes external public assets and stray servers that are not understood by administrators, including overseas bases and subsidiaries related to their company. I would like to introduce you to If you feel a sense of danger from attacks that exploit VPNs, including ransomware, please watch this video.