On January 24, 2024, the Information-technology Promotion Agency, Japan (IPA) announced “Information Security 10 Major Threats 2024.”

The threats for organizations were: 1. Damage from ransomware; 2. Attacks exploiting supply chain weaknesses; 3. Information leakage and related damage due to internal fraud; 4. Theft of confidential information through targeted attacks; 5. Attacks targeting vulnerabilities before patches are released (zero-day attacks); 6. Information leakage and related damage due to carelessness; 7. Increased exploitation following the release of vulnerability information; 8. Financial damage due to business email compromise; 9. Attacks targeting telework and other new-normal work styles; and 10. Criminal business models, including underground services.

In “Information Security 10 Major Threats 2024,” damage from ransomware ranked first for the fourth consecutive year. Attacks exploiting supply chain weaknesses ranked second for the second consecutive year.

The company provides assessment and consulting services for ransomware countermeasures and supply chain security enhancement.