Methodology and how to read the research
SaibaRadar is public research by Aokumo Inc. It organizes cybersecurity disclosures concerning organizations in Japan and important vulnerabilities, with links to original sources.
What does the register cover?
The register includes disclosures and follow-up reports from public sources, such as organizational notices and reporting. It is not a complete census of incidents in Japan. Several disclosures can concern the same event; report counts are not attack counts or counts of affected organizations.
Does a listed domain mean the website was breached?
No. Domains identify organizations or services. A listing does not establish that the website was breached or unavailable unless the original notice explicitly says so. Service disruption, potential exposure, unauthorized queries and confirmed exfiltration are distinct outcomes.
How should I read impact figures and chains?
People, accounts, email addresses and records are different units. Do not sum potentially overlapping scopes. Dependency links do not establish an attacker's movement. Information needing re-verification after source changes is labeled accordingly. Read historical figures with their original dates and qualifications.
What do CVE priorities and scores mean?
CISA KEV membership is evidence of known exploitation. CVSS measures severity; FIRST EPSS estimates exploitation probability. Neither score alone confirms exploitation. Addition to SaibaRadar is distinct from the CVE publication date. Software lifecycle information describes branches, not an assessment of systems you operate.
How should I verify and cite a finding?
Cite the specific report or CVE URL and disclosure date, then follow its original sources to verify scope and qualifications. Quotations retain their source language; switching the interface language does not create an official translation. Successful source retrieval does not mean every field is complete. Visitors without JavaScript see a publication snapshot.