ISF NET to Present at "MS Monthly Vulnerability Study Session" for Infrastructure Engineers, Explaining How to Identify Truly Necessary Responses

ISF NET Inc. (Headquarters: Minato-ku, Tokyo / President and CEO: Yukiyoshi Watanabe, hereinafter ISF NET) is pleased to announce that on June 13, 2026 (Sat), a security specialist from ISF NET served as a lecturer at the free seminar "[Understand the Latest Vulnerabilities!!] MS Monthly Vulnerability Study Session," operated by Heatwave Inc. (hereinafter Heatwave) as part of its practical security school, "Secu-Juku."

◆Background and Overview of the Study Session

To counter increasingly sophisticated cyberattacks each year, security knowledge is indispensable in the IT infrastructure field. This study session was held with the aim of explaining "how to identify vulnerabilities truly necessary in the field" to infrastructure engineers and security personnel.

The session was a great success, with 44 participants attending both online and at the venue. Koji Nonoshita from ISF NET's Engineering Development Division, Technical Education Department, presented, providing practical know-how that can reduce the burden of actual work in the field.

◆Vulnerability Discovery by AI and More: Latest Trends and Practical Approaches

It was reported that a record-breaking number of over 200 vulnerability fixes were addressed this time. In addition to the increase in the number of discovered vulnerabilities due to the use of generative AI, an overview of recent security update programs and practical response approaches were explained.

Specifically, the importance of comprehensively judging exploitability, rather than blindly accepting vendor "severity" ratings or CVSS scores, was explained. Furthermore, the necessity of early response to threats for which proof-of-concept (PoC) code has already been released, such as BitLocker encryption bypass (YellowKey) and privilege escalation (GreenPlasma), was mentioned. The session also covered issues in the collaborative vulnerability disclosure (CVD) process, which has been a problem since last month, involving troubles with vulnerability discoverers.

Positive Feedback on "Applicable to Practical Work" in Survey Results

The survey conducted after the study session received many high ratings such as "Very Satisfied" and "Satisfied" from participants. Various questions were raised on the day, including the impact of AI, indicating the high level of interest from attendees.

▼Voices from Participants (Excerpts from open-ended survey responses)

Many positive comments were received regarding the practical explanations and know-how applicable in the field.

It was good to be able to get an overview of vulnerabilities, including those outside my direct area of work. I also felt that the content explained could be applied to my practical work.

Seeing how to download MS reports and the materials compiled by component was a valuable learning experience. I plan to do the same.

I was surprised by the large number of vulnerabilities discovered by AI. I also realized that AI is evolving to find solutions directly. I can feel the acceleration of speed in various things.

I feel that the workload for security personnel will increase further in the future due to the impact of generative AI.

Discussions about troubles with researchers felt like the "dark side" of the industry. I believe the integrity of researchers is necessary for the healthy evolution of systems.

◆Future Developments

Following the success of this study session and the high evaluation from participants, ISF NET will further expand its information dissemination utilizing the practical security know-how cultivated in its own field operations. Through the continuous holding of study sessions and other initiatives, we will contribute to the development of practical security personnel and enhance the safety of IT infrastructure for society as a whole.

◆About "Secu-Juku," a Practical Security School for Training White Hat Hackers from Beginners

"Secu-Juku" is a security school operated by Heatwave Inc., specializing in training white hat hackers who can learn cyberattack methods and defense techniques, with top-class renowned individuals active in the security industry as instructors.

"Secu-Juku" HP: https://www.heatwavenet.co.jp/secujuku/

◆Related Links

・ISF NET and Heatwave Begin Collaboration for Practical Security Personnel Development

・[Held on Saturday, June 13] ISF NET Engineer to Speak at "MS Monthly Vulnerability Study Session" Hosted by Practical Security School "Secu-Juku"

◆About ISF NET Inc.

ISF NET is an IT infrastructure company that provides solutions in the cloud, network, and security domains. By supporting the offering strategies of major clients leading IT issue resolution in society and providing optimal solutions packaged with technical capabilities, we contribute to business value enhancement. With approximately 2,300 engineers on staff, we have 14 domestic bases and bases in three Asian countries (China, South Korea, and Singapore). Under the corporate brand of "Human Resource Development Company," we support our clients' business transformation by fostering highly skilled IT infrastructure engineers.

ISF NET HP: https://www.isfnet.co.jp/

Information regarding content, contact details, service/product prices, specifications, and other details published in this release is current as of the announcement date. It may be changed without prior notice. Please be aware of this in advance.

Furthermore, company names and product/service names mentioned are trademarks or registered trademarks of their respective companies and belong to their trademark holders.