Japan Plans AI Cyberattack Simulations as PHP Flaws Disrupt Online Services

Japan plans to use AI to simulate cyberattacks and identify weaknesses as organizations respond to critical PHP flaws. The disruption reached a mobile emergency-alert system, while banks, railways, airlines and government agencies suspended selected online services as a precaution.

jajoy39

Oct 23, 2026 - 12:11

Oct 23, 2026 - 13:43

0 3

Japan’s national flag (file photo). Image source: engin akyurt / Unsplash. https://unsplash.com/photos/a-close-up-of-the-flag-of-japan-wiTdsimTPeA

Japan Plans AI Cyberattack Simulations as PHP Flaws Disrupt Online Services

Japan said it will establish a team to simulate cyberattacks using artificial intelligence as organizations worldwide respond to critical flaws in the PHP programming language. The plan is intended to help identify weaknesses from an attacker's perspective, rather than indicating that Japan's systems were successfully breached.

Emergency services affected

SoftBank said it was suspending its emergency-alert system for mobile users while it maintained systems affected by a PHP vulnerability. Customers would not receive earthquake, tsunami or disaster and evacuation warnings during the maintenance period. Brokerage Nomura, Mitsubishi UFJ Financial Group, ANA and East Japan Railway also temporarily suspended some internet services, Reuters reported.

Japan's Finance Ministry, National Tax Agency and Meteorological Agency took similar precautions. JR East said some services had resumed, while others would return after safety checks.

Why Japan is using AI

Industry Minister Ryosei Akazawa said attackers need only one opening and that defenders should use AI proactively. Trend Micro CEO Eva Chen said AI is helping attackers automate vulnerability scanning and phishing, potentially making it easier to target systems whose records were once protected by language barriers.

The underlying PHP risk

PHP developers released fixes on Wednesday for vulnerabilities that had remained in the software for years and urged users to update immediately. The broader incident prompted websites and government services from Tokyo to Helsinki to go offline while operators patched or isolated systems.

A precautionary shutdown is not proof of exploitation. The practical challenge is restoring services only after patches have been installed and tested, especially where older PHP branches or complex dependencies make updates difficult.

Illustrative file photo of software code on a monitor; it does not depict an attack or a system involved in this report. Photo: Markus Spiske / Unsplash. Unsplash License; cropped to 16:9. Image source; license.