In the second half of 2025, various security incidents made headlines. Many of these stemmed from publicly accessible assets, resulting in ransomware attacks that threatened business continuity and the need to address N-day vulnerabilities in widely used JavaScript libraries. This likely caused concern among many companies regarding their own security measures. While Attack Surface Management (ASM) is commonly used to detect risks in such publicly accessible assets, its operation presents various challenges. This seminar will explain the incidents and N-day vulnerabilities that occurred in the second half of 2025, and will also discuss common challenges and solutions when using ASM in operations.

Collecting and addressing vulnerability information is not easy. In fact, more than 48,000 CVEs (Common Vulnerabilities and Exposures) were registered between January and December 2025. This is more than 20% more than the 40,000 recorded in 2024 (according to Macnica). While many organizations prioritize their response efforts based on CVSS scores, this approach may overlook vulnerabilities that are actually being exploited by attackers. The current trend in vulnerability management is "risk-based vulnerability management," which takes into account factors such as whether a vulnerability has actually been exploited and whether it is likely to be exploited. Furthermore, when addressing vulnerabilities, it is essential to manage whether the company owns any devices with vulnerabilities. In this seminar, we will look back at the vulnerabilities that were actively exploited in 2025 and provide tips on how to escape the overwhelming vulnerability burden, prioritize your company's assets based on risk, and address vulnerabilities appropriately.

In recent years, cyber-attacks targeting externally exposed servers have increased rapidly. 511 cases of ransomware attacks were confirmed in Japanese companies and organizations between May 2020 and September 2024 (according to Macnica), and most of them were caused by vulnerabilities in externally exposed servers and intrusions via improperly exposed remote desktops. Many of these attacks are the result of vulnerabilities in externally exposed servers or improperly exposed remote desktops. To prevent such attacks, it is essential to first understand the attacker's modus operandi and take countermeasures accordingly. This video explains in detail why external public assets are being targeted now and how attackers are getting in, including an attack demonstration. In addition, the most effective countermeasure points that can be seen only from an attacker's point of view will be presented. This is a valuable opportunity to experience the attacker's thought process through the attack demo. Please come and watch.

Nowadays, organizations' IT assets are widely dispersed both inside and outside the company, making it difficult to manage them using traditional methods and making them targets for attackers. To address this situation, "Continuous Threat Exposure Management (CTEM)" is gaining attention. CTEM is an effective way to continuously discover and improve risks in response to ever-changing environments and threats. This seminar will explain the basic concepts of CTEM, the implementation steps, and how to get started using ASM, with specific examples. Let's take the first step toward continuous threat preparedness.

Recently, attack methods have changed, and attacks targeting publicly available assets for which countermeasures have not yet been implemented are becoming more common. In fact, the National Police Agency's threat trend survey showed that 81% of incidents were caused primarily by publicly available assets. The Ministry of Economy, Trade and Industry will publish ASM implementation guidance in 2023, and companies are beginning to seriously consider implementing ASM. However, implementing ASM to manage publicly available assets requires identifying and managing assets managed by affiliated companies and other departments, so many companies are struggling to make progress. In this session, we will invite three companies that are putting ASM into practice, and they will discuss their daily operations, challenges, and success stories, incorporating case studies from many companies that Macnica has supported.

Recently, there are many people who feel that there are more opportunities to see security incidents related to ransomware damage and information leaks at various companies. The background to this is that servers (especially RDP) and network devices (especially VPN) that are open to the public and have insufficient management and vulnerability countermeasures at their own company, subsidiaries, and overseas bases, etc. There are situations where it is being exploited as a fourth intrusion vector to follow. In March of this year, we were damaged by a major company's supply chain VPN infringement, which led to a serious situation of a large-scale stoppage of the factory line. In this video, we will explain in an easy-to-understand manner the background of the recent surge in incidents and the techniques used by attackers. On top of that, as the first step in the measures that each company should implement now, a solution that identifies and visualizes external public assets and stray servers that are not understood by administrators, including overseas bases and subsidiaries related to their company. I would like to introduce you to If you feel a sense of danger from attacks that exploit VPNs, including ransomware, please watch this video.