Eventus has published a new engineering article on Qiita: “Shifting Phishing Investigations from a Single Email to a Campaign: Scoping Impact with Defender XDR and Sentinel” (「フィッシング調査を『1通のメール』から『キャンペーン単位』に切り替える―Defender XDRとSentinelで影響範囲を出す」).
What Japan's October cyber wave shows, and five questions leadership should be able to answer this week.
In early October 2026, a run of data leaks caused by unauthorised access drew an unusually direct response from the Japanese government. On 8 October, the government convened an inter-ministerial meeting. Toshiharu Furukawa, Japan's Minister for Digital Transformation, who also oversees cybersecurity, said companies would be asked to fix system vulnerabilities, strengthen authentication and prevent the misuse of leaked information, and that these measures should extend to outsourced contractors.
The next day, the Cabinet Secretariat's National Cybersecurity Office (NCO) published an official notice, 「不正アクセスによる漏えい等の事案を踏まえた対応について」 (roughly, Response to incidents of leaks caused by unauthorised access; the notice is published in Japanese only). It confirms multiple cases in which attackers broke into the systems of organisations holding large volumes of personal data and stole it. The NCO names three routes: exploited web-system vulnerabilities, compromise through the supply chain, and weak data management. At a meeting of the Liberal Democratic Party's National Cybersecurity Strategy Headquarters on 9 October, its head Masaaki Taira said cybersecurity had entered a new phase and that the country now faced "a state of emergency, a contingency" (非常事態、有事). The LDP published its account of the meeting on 14 October. That is a political warning, not a legal declaration. It came just over a week after key provisions of Japan's Active Cyber Defence legislation took effect on 1 October.
We're pleased to announce that Eventus is starting operations in Jakarta, Indonesia. This marks a new chapter for Eventus as we connect with businesses and partners in Indonesia and explore how our technology and expertise can support their goals.
From strengthening cybersecurity to making better use of operational data, we look forward to working with organizations in Jakarta and across Indonesia on practical steps toward digital transformation.
Eventus has published a new engineering article on Qiita: “Designing Sentinel User Behavior Analytics Without Raw-Table Dependencies: Using ASIM Authentication as the User Baseline.”
The article looks at why analytics built directly on tables such as SigninLogs, SecurityEvent, and connector-specific logs become harder to maintain as authentication sources multiply. It also covers how raw event volume can run into result limits, while connector outages or ingestion delays can leave gaps in the data.
We're announcing that SIEM+ now has full, native support for Microsoft Sentinel, joining our existing integrations with Devo, Splunk, and QRadar. If your organization runs Sentinel as its SIEM, you can now add SIEM+'s alert consolidation and AI-powered triage on top of it without changing anything about your existing Sentinel deployment.