Josys Co., Ltd., a provider of identity security infrastructure, will begin offering three functions, the first of their kind in Japan, to strengthen countermeasures against cyberattacks such as ransomware attacks, within its “Josys” service.
The first feature, “Leaked Credential Detection,” detects leaked credentials originating from sources such as the dark web. The second feature, “AI Agent Detection and Management,” automatically discovers AI agents operating within the company and manages their various permissions and credentials. The third feature, “Automatic Policy Execution by AI,” uses AI to detect risks based on policies and automatically corrects them.
These are all functions in the “identity security” domain, which comprehensively manages and protects all kinds of authentication information that is increasing across people, AI, and systems, including employee accounts, AI agent accounts, and service accounts.
Also Read: freee IT Management Introduces Custom SCIM Support
Changes surrounding ransomware attacks
In recent years, ransomware attack methods have changed significantly. In addition to the traditional “attacks that exploit system vulnerabilities to gain infiltration,” “attacks that use stolen genuine IDs and passwords to log in as legitimate users” are becoming more widespread. In fact, the attack on Askul in 2025 was largely due to unauthorized logins using leaked authentication information.
The background to this is the expansion of “infostealers.” When employees’ personal PCs or contracted terminals become infected, authentication information and cookies are stolen, leading to an increasing number of cases where this results in unauthorized access that bypasses MFA (multi-factor authentication).
In light of this situation, companies are being called upon to strengthen their identity security by “comprehensively protecting all authentication information.” Furthermore, cybersecurity is becoming increasingly important from the perspective of economic security, as evidenced by the Ministry of Economy, Trade and Industry’s publication of the “SCS Evaluation System” and its designation as one of the 17 strategic areas by the Takaichi administration.
Challenges in the Information Systems Department
The number of identities that companies need to manage is rapidly increasing. In addition to employee accounts, non-human identities such as AI agents and service accounts are also rapidly increasing, leading to situations where IT departments cannot keep track of “who (or what) is accessing which data.”
In addition, security breaches and malware infections are occurring outside of corporate control, such as on employees’ personal PCs and outsourced terminals, resulting in cases where company identities are circulating on the dark web. Meanwhile, the shortage of security personnel is becoming increasingly serious, making it difficult to respond quickly to the ever-increasing number of alerts and increasingly complex access control.
As a result, addressing “cyber risks surrounding AI” and the increasing complexity of identity management is becoming increasingly important not only for information systems departments but also as a management issue.
SOURCE: PRTimes


