KR — 전자신문

AhnLab Joins Japan's Security Days, Highlights Industrial OT Security

SecurityOctober 25, 20261 min read

AhnLab, a Korean cybersecurity company, took part in a security trade show in Tokyo to sell its factory-control security products in Japan. It focused on protecting industrial equipment from cyberattacks.

What happened

AhnLab joined the cybersecurity show 'Security Days Fall 2026 Tokyo' from March 21 to 23. The company showed products for OT (operational technology), the systems that run factory machines. It said its booth and talks focused on CPS (cyber-physical system) security, which protects both IT (office computer) networks and factory OT networks together.

Key facts

The show ran for three days, from the 21st to the 23rd, in Tokyo.
Main products: AhnLab XTD (OT network security) and AhnLab EPS (OT endpoint security).
AhnLab named Tsubaki Yoji as its new country manager in Japan on the 1st.
Tsubaki has worked at IBM, Symantec and Veritas for more than 20 years.

Why Japan's factories are a target

Factories use old machines that are hard to update. Ransomware, a type of virus that locks data until a payment is made, can stop production. AhnLab says this risk is growing for Japanese manufacturers, so it stressed keeping equipment safe and running smoothly.

Why it matters

AhnLab is trying to grow in Japan by offering security made for factories, not just offices. If a factory stops, it loses money, so companies that protect production lines may win more customers. The new country manager is meant to help AhnLab build local partnerships.

What to watch

Whether AhnLab signs new customers or partners in Japanese factories.
How the new country manager grows the Japanese business.
How AI changes the threats that factory security must handle.

Glossary

AhnLab: A Korean company that makes computer security software.
OT (operational technology): Computer systems that control and run machines in factories and plants.
CPS (cyber-physical system): A system where computers control real physical machines, so both data and machines need protection.
Ransomware: Harmful software that locks a victim's files and demands payment to unlock them.
AhnLab XTD: AhnLab's product that finds harmful code and strange activity on factory networks.

Same story, different eyes

The EngineerAI

Security that listens quietly, so the factory line never has to stop

What I find neat is the passive scan approach: instead of poking at equipment, it just watches network traffic, so a running production line barely feels it. The lightweight agent that works even on old operating systems with no more patches is a hard balance to strike, because factory machines can't be updated or rebooted as easily as office PCs. I'm curious how well this holds up across the many different equipment types in Japanese factories, which isn't known yet.

The SkepticAI

Passive scanning and old-OS support: the OT details worth a closer look

What caught my eye is that the pitch rests on two plant-floor concerns: not disturbing running production, and protecting legacy OS machines that no longer get patches. If you're weighing this, it would help to see how a passive-scan approach performs in a real factory, and how an allow-list copes when equipment changes. Japanese customer references or pilot results would make the story even more reassuring. How well it fits Japan's manufacturing sites is not yet known.

The UserAI

Security that watches factory traffic without touching the line

If you work on a factory floor, the most reassuring part is the passive scan approach: it analyzes network traffic without poking at running equipment, so production shouldn't be disturbed. Support for old operating systems that no longer get security patches also matters, because replacing that equipment is rarely quick. Day to day, you'd likely notice changes first in things like which programs and USB drives are allowed on a machine. How soon Japanese factories will actually adopt this isn't known yet.

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

Security전자신문Oct 26

Logpresso Releases 'PHP2Shell Scanner' to Check Internal Network Vulnerabilities

Logpresso has released a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerabilities known as PHP2Shell. The tool can scan both publicly exposed websites and PHP-based systems on internal networks, where internet-based scanning services cannot reach.

SecurityVnExpressOct 26

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.