Japan Plans AI Cyber-Defense Team as PHP Security Flaws Disrupt SoftBank Disaster Alerts

TOKYO, October 24, 2026 — Japan plans to assemble a specialist cybersecurity team by November to find software weaknesses before attackers exploit them, as critical flaws in the widely used PHP programming language force organizations to take services offline for emergency protection.

The planned team will operate through Japan’s Information-technology Promotion Agency (IPA), according to Japanese broadcaster FNN and Reuters reporting on October 23. Industry Minister Ryosei Akazawa said defenders need to use artificial intelligence to identify vulnerabilities proactively, rather than waiting for intrusions to occur.

Disaster-warning disruption puts risks in focus

The consequences extend beyond ordinary websites. Japanese telecommunications company SoftBank said in an October 23 company notice that emergency maintenance to address PHP vulnerabilities had interrupted its emergency alert messages for SoftBank, Y!mobile and LINEMO customers. During the interruption, the affected alert service cannot deliver earthquake early warnings, tsunami warnings or disaster and evacuation notices.

SoftBank said maintenance began at 6:47 a.m. Japan time on October 23 and was expected to finish on October 26. The company directed customers to alternatives such as the Yahoo! Japan disaster-prevention app. The notice concerns the emergency alert-message service; it does not say all mobile communications are unavailable.

Developers urge immediate security updates

On October 21, the PHP development team issued security releases including PHP 8.2.35 and PHP 8.3.36. Its notices identify two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could allow remote code execution without authentication. The developers say affected installations should be upgraded immediately and that there are no complete alternative mitigations.

Reuters reported that some Japanese transport, financial and government online services were temporarily suspended as operators assessed risks or applied patches. Such precautionary shutdowns do not, by themselves, establish that those systems were successfully hacked.

The episode illustrates a double-edged shift in cybersecurity: AI can help defenders locate flaws earlier, but it can also accelerate attackers’ searches for weaknesses. Japan’s proposed team is intended to move defenses closer to the speed of the threat.

Featured photograph: Archival view of Tokyo Tower and the Tokyo skyline, photographed in 2017. This is an illustrative city photograph, not a picture of the cyber incidents or SoftBank maintenance. Photo: Louie Martinez / Unsplash, Unsplash License.