EXPLORINEER
en

JP — ITmedia

Nomura Research Institute launches service to support proactive system shutdowns during cyberattacks

Security2 min read

Nomura Research Institute (NRI) and its subsidiary NRI Secure Technologies started a service that helps companies decide when to shut down and restart their systems after a cyberattack. The service aims to help top managers make quick decisions.

A new service for hard decisions

On October 22, NRI and NRI Secure Technologies launched a service called "Cyber Resilience Management Support." It helps companies that have been attacked choose when to stop and restart their systems on purpose. The service sets rules for these choices and a clear decision process, so leaders can act fast and stop damage from spreading. The article says attacks that use AI are becoming more advanced.

Key facts

  • The support period is about 2 to 3 months at the shortest.
  • The work has 4 steps: check the current situation, set decision rules, design operations, and get agreement from top managers.
  • Main customers include online shops, digital service operators, global manufacturers, financial companies, and other critical infrastructure companies.
  • The service also estimates costs such as emergency spending, damages, customer compensation, and lost sales.
  • Risks that are hard to measure in money, such as trust and brand damage, are also checked.

Why shutting systems down can be the right move

Sometimes the safest step during an attack is to turn off a system on purpose. This idea got public attention after a serious flaw was found in PHP, a programming language used to build websites. On October 21, Japanese Prime Minister Sanae Takaichi wrote on X that temporarily pausing websites can be an effective way to lower risk if security fixes cannot be applied quickly. Her post drew a big response online.

Why it matters

Many companies find it hard to decide whether to stop a service, because stopping it also costs money and trust. A clear plan made before an attack can help leaders act without delay. As AI helps attackers find and use flaws faster, this kind of planning may become more important for many organizations.

What to watch

  • Whether more companies sign up for the service.
  • How companies use shutdown rules when new security flaws are found.
  • Whether other security firms offer similar planning support.
  • How fast PHP flaws and similar AI-found flaws are fixed in the coming months.

Glossary

NRI Secure Technologies
A subsidiary of Nomura Research Institute that provides information security services.
PHP
A programming language widely used to build websites.
Security전자신문

Editorial: Information Security Also Needs an Insurance Safety Net

Following a string of personal data leaks and AI-driven hacking attacks, Korea's cyber insurance market remains very small, at roughly 60–65 billion won a year according to industry estimates. The editorial argues that most companies carry only the legally mandated minimum of 1 billion won in coverage, leaving affected citizens without an adequate safety net, and it calls on businesses to invest in cyber insurance and on policymakers to strengthen compensation systems.

SecurityITmedia

Good Smile Company Hit by Unauthorized Access; Official EC Site Closed, Member Addresses and Order History Possibly Leaked, No Reopening Date Set

Good Smile Company, a figure maker based in Tokyo, said on October 23 that unauthorized access to its official EC site, "Good Smile Company Official Shop," allowed third parties to view member personal information. The site is closed with no reopening date set. The company says the exposed data may include member names, addresses, phone numbers, email addresses, order details, and the brand and last four digits and expiry date of credit cards, while full card numbers and security codes were not included.

SecurityThe Register

Work to protect DNS from quantum decryption attacks is speeding up

ICANN's CTO John Crain told The Register that internet governance bodies are likely to accelerate work to make the DNS quantum safe, because predictions suggest capable quantum computers could arrive around the turn of the decade. He said that larger DNSSEC keys would create larger packets and may force a shift from single UDP messages to multiple TCP packets, a transition he expects will take a few years.

Security전자신문

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.