1 source 1m ago
CyberStep and NAXA Launch Attacker-View Security Assessment on November 1
CyberStep, Inc. and NAXA, Inc., both wholly owned subsidiaries of Tokyo Stock Exchange Standard Market-listed CyberStep Holdings, will jointly begin providing a security assessment service on November 1, 2026.
Reporting from 1 source: ASCII.jp.
Why it matters
A game developer's corporate group is selling offensive-security diagnostics to other companies, which puts its system development and game operation experience into a service aimed at the configuration and permission gaps that the PHP2Shell vulnerability and ransomware rank as pressing risks.
Key Facts
- CyberStep, Inc. and NAXA, Inc. will jointly begin providing a security assessment service on November 1, 2026.
- The service verifies intrusion paths from an attacker's perspective for corporate SaaS, cloud, and business systems.
- Both companies are wholly owned subsidiaries of CyberStep Holdings, Inc., listed on the Tokyo Stock Exchange Standard Market.
- The service also addresses the critical PHP vulnerability disclosed in October 2026, known as PHP2Shell.
- IPA's Information Security 10 Major Threats 2026 ranked damage from ransomware attacks first and attacks targeting the supply chain and subcontractors second.
The service checks intrusion paths from an attacker's perspective for corporate SaaS, cloud, and business systems, reports paths to important information and the priority of countermeasures, and covers remediation planning and re-evaluation. The two firms cite IPA's 2026 threat ranking and the October 2026 critical PHP vulnerability known as PHP2Shell.
The service verifies how far an attacker can reach by combining weaknesses that appear separately across systems: excessive administrator privileges, misconfigured external sharing, credentials left unchanged, and thin audit logs. Before any testing, CyberStep and NAXA agree with the customer on target systems, scope, implementation time slots, stop conditions, and emergency contact procedures, and verification stays inside that authorized range.
Reporting goes beyond a list of detected weaknesses. It presents the paths that lead to important information and functions and the order in which countermeasures should be taken, so customers can decide where to spend limited personnel and budget. The service also covers drafting remediation plans, supporting execution, and re-evaluating after countermeasures are in place.
Written with AI by Yomimono from the 1 cited source below, including Japanese-language reporting where cited. See our editorial policy.
Add Yomimono as a preferred source on Google