JPCERT/CC (Japan)
jpcert · A · active
https://www.jpcert.or.jp/english/index.html
Japan Computer Emergency Response Team Coordination Center, primary Asian-region government CTI; strong on DPRK / China-aligned campaigns and Patch-Tuesday alerts (added 2026-05-08). 2026-05-08 audit: WebFetch returned 5 dated alerts Feb 12 - Apr 15 2026 (~3 weeks behind). | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.jpcert.or.jp/english/index.html (listing) then webfetch the per-advisory jvn.jp/en/jp/JVN<id>/ URL for CVE/CVSS detail. AVOID: No bridge needed; WebFetch works. Note most listed items are JVN advisories on jvn.jp (a separate host), drill there, not on jpcert.or.jp.. | 2026-07-05 admiralty audit: A, Japan's national CERT/CC; primary authority for its own coordinated advisories and JVN. HIGH->A, stays active. | 2026-10-19 intel run S1: https://www.jpcert.or.jp/rss/jpcert.rdf reads direct; alerts (jpcert.or.jp/at/2026/atNNNNNN.html) and JVN pages (jvn.jp/en/jp/JVNnnnnnnnn/index.html, feed https://jvn.jp/en/rss/jvn.rdf) read with extract. | 2026-10-11 quality audit: the HTML alert page returns an empty skeleton on extract and WebFetch; discovery via python3 tools/fetch_source.py feed https://www.jpcert.or.jp/english/rss/jpcert-en.rdf 20 (dated items).
Cited in 2 entries
Citation cadence
Citation days per ISO week (24 weeks of coverage span, total 2).
- Japan's wave of personal-data theft from web systems: JPCERT/CC and NICT describe attackers who decompile the published Android app to find internal APIs, drop JSP web shells as .war files on application servers, and run AI penetration-testing platforms against exposed web applications and WSUS servers2026-10-26
- CVE-2026-34926, Trend Micro Apex One On-Premise: post-auth directory traversal by admin-credential holder injects code deployed fleet-wide to all managed agents (CISA KEV, ITW)2026-05-22