NICT CYNEX (LETTICE threat-intelligence analysis team)

nict-cynex-lettice · A · candidate

https://cynex.nict.go.jp/library/

researchlang: jalang: enfetch failures: 0quiet periods: 0last fetch: 2026-10-26

Added 2026-10-26 (S3): NICT's joint threat-analysis team (LETTICE) named and documented the app-to-backend (A2B) attack on 2026-10-13, cited by JPCERT/CC. No feed on the library index; article pages read cleanly with `extract`; the detail PDF is not extractable (garbled), so use the HTML pages. Candidate: promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

Japan's wave of personal-data theft from web systems: JPCERT/CC and NICT describe attackers who decompile the published Android app to find internal APIs, drop JSP web shells as .war files on application servers, and run AI penetration-testing platforms against exposed web applications and WSUS servers2026-10-26