Japan to enhance threat hunting for critical infrastructure

The Japanese government has announced plans for fiscal 2027 to strengthen threat hunting capabilities across critical infrastructure, including telecommunications and power utilities. This initiative aims to identify cyber attackers who may have already infiltrated networks and are operating undetected.

Under the new framework, the National Cybersecurity Office will recreate potential attack scenarios in virtual environments to develop and test detection methods. These methods will then be shared with private-sector operators. Additionally, the Defense Ministry will be able to dispatch personnel with specialized threat-hunting experience to assist infrastructure companies upon request.

These measures follow the implementation of legislation regarding active cyber defense. The move is intended to prevent national crises that could arise if essential services are disrupted during a contingency. The initiative draws attention to the risk of sophisticated actors using legitimate administrative tools to evade detection and maintain long-term access to vital systems.