{"rewrite":{"id":"r_90ffe1887dec8926f33a37f5","clusterId":"c_d37402d4f6f1a7b97a2b964f","slug":"cyberstep-and-naxa-launch-attacker-view-security-assessment-on-november-1","model":"deepseek-v4-1-flash","headline":"CyberStep and NAXA Launch Attacker-View Security Assessment on November 1","summary":"CyberStep, Inc. and NAXA, Inc., both wholly owned subsidiaries of Tokyo Stock Exchange Standard Market-listed CyberStep Holdings, will jointly begin providing a security assessment service on November 1, 2026. The service checks intrusion paths from an attacker's perspective for corporate SaaS, cloud, and business systems, reports paths to important information and the priority of countermeasures, and covers remediation planning and re-evaluation. The two firms cite IPA's 2026 threat ranking and the October 2026 critical PHP vulnerability known as PHP2Shell.","whyItMatters":"A game developer's corporate group is selling offensive-security diagnostics to other companies, which puts its system development and game operation experience into a service aimed at the configuration and permission gaps that the PHP2Shell vulnerability and ransomware rank as pressing risks.","webCardHtml":"\u003cp\u003eThe service verifies how far an attacker can reach by combining weaknesses that appear separately across systems: excessive administrator privileges, misconfigured external sharing, credentials left unchanged, and thin audit logs. Before any testing, CyberStep and NAXA agree with the customer on target systems, scope, implementation time slots, stop conditions, and emergency contact procedures, and verification stays inside that authorized range.\u003c/p\u003e\u003cp\u003eReporting goes beyond a list of detected weaknesses. It presents the paths that lead to important information and functions and the order in which countermeasures should be taken, so customers can decide where to spend limited personnel and budget. The service also covers drafting remediation plans, supporting execution, and re-evaluating after countermeasures are in place.\u003c/p\u003e","blueskyPost":"CyberStep and NAXA sell an attacker's-eye view of the same SaaS and cloud systems most firms assess only from inside. The PHP2Shell flaw cited in their launch is the case where the view from outside is the one that matters.","twitterPost":"CyberStep and NAXA assess corporate SaaS from the attacker's side rather than the defender's. PHP2Shell is why that direction counts.","threadsPost":"CyberStep and NAXA frame their new service around the attacker's path in, not the defender's checklist. Reporting which intrusion routes reach important data, and in what order to fix them, is a different product from a compliance scan. PHP2Shell is the case they point to.","newsletterBlurb":"CyberStep and NAXA, both under CyberStep Holdings, will begin a joint security assessment service on November 1, 2026. The service checks intrusion paths from an attacker's perspective across SaaS, cloud, and business systems and reports the priority of countermeasures. It also covers the critical PHP vulnerability disclosed in October 2026.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/446/4446894/?rss\",\"title\":\"Announcement of the Start of Provision of Attacker-Perspective Security Assessment Services by CyberStep, Inc. and NAXA, Inc.\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":5142,"outputTokens":784,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1793251169,"createdAt":"2026-10-29T05:15:36.000Z","publishedAt":"2026-10-29T05:18:25.000Z","updatedAt":"2026-10-29T05:18:25.000Z"},"cluster":{"id":"c_d37402d4f6f1a7b97a2b964f","canonicalTitle":"サイバーステップ株式会社及びNAXA株式会社による攻撃者視点のセキュリティ診断サービスの提供開始に関するお知らせ","representativeArticleId":"a_7df4a950ad9614b47845e0b7","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[\"CyberStep\",\"NAXA\"],\"people\":[],\"type\":\"business\",\"domain\":\"industry\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-29T03:36:47.000Z","lastSeenAt":"2026-10-29T03:36:47.000Z","updatedAt":"2026-10-29T05:18:25.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/446/4446894/?rss","title":"サイバーステップ株式会社及びNAXA株式会社による攻撃者視点のセキュリティ診断サービスの提供開始に関するお知らせ"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":["CyberStep","NAXA"],"people":[],"type":"business","domain":"industry","is_roundup":false},"keyFacts":["CyberStep, Inc. and NAXA, Inc. will jointly begin providing a security assessment service on November 1, 2026.","The service verifies intrusion paths from an attacker's perspective for corporate SaaS, cloud, and business systems.","Both companies are wholly owned subsidiaries of CyberStep Holdings, Inc., listed on the Tokyo Stock Exchange Standard Market.","The service also addresses the critical PHP vulnerability disclosed in October 2026, known as PHP2Shell.","IPA's Information Security 10 Major Threats 2026 ranked damage from ransomware attacks first and attacks targeting the supply chain and subcontractors second."],"pageLinks":{"healthSlugs":["cyberstep","naxa"],"storySlugs":[],"entities":[{"slug":"cyberstep","supported":0,"disputed":0,"contradicted":0,"unverified":4,"overall":"unverified","story_count":4,"has_dossier":true},{"slug":"naxa","supported":0,"disputed":0,"contradicted":0,"unverified":0,"overall":"unverified","story_count":1,"has_dossier":false}],"stories":[],"entitiesOk":true,"storiesOk":true}}