Daily · 2026-07-14
🚕 Nihon Kotsu Shutdown, 📦 Jscrambler Supply Chain, 🇪🇺 EU-UK Russia Sanctions, 🍎 CrashStealer macOS, 🐰 RabbitMQ OAuth Leak
RabbitMQ critical OAuth secret disclosure (CVE-2026-57219), Jscrambler npm supply chain compromise with infostealer, EU/UK joint sanctions on FSB/Turla and GRU, Nihon Kotsu taxi operator cyberattack, CrashStealer macOS infostealer, and ASEC's June APT trend report covering 20 state-sponsored groups.
Nihon Kotsu, Japan's largest taxi operator, shut down its dispatch and booking systems after a malware infection, suspending taxi, reservation, and telephone services across Tokyo, Yokohama, and Saitama. A company that moves people across three major metropolitan areas is a soft critical-infrastructure target, and with no ransomware claim and no confirmed data leak, the incident is still developing. Nihon Kotsu: Japan's Largest Taxi Operator Shuts Down After Cyberattack
The Jscrambler npm compromise matters more for process than payload. An attacker with publishing credentials pushed an infostealer into four package releases, and the two-hour window still produced 1,479 downloads. Anyone who installed versions 8.14 through 8.20 has to treat the environment as compromised. Jscrambler npm Supply Chain Compromise: Infostealer in 4 Package Releases
RabbitMQ's CVE-2026-57219 hands the OAuth client secret to any unauthenticated caller, which becomes full broker takeover, and patching alone is not a fix: the leaked credential stays valid until rotated. The EU and UK imposed their first joint cyber sanctions on FSB Center 16, GRU leadership, and Lumma Stealer operators, and a 13-nation advisory reiterated FSB targeting of routers and edge devices through decade-old CVEs.
Watchlist: rotate OAuth client secrets after any RabbitMQ upgrade, audit developer workstations for the poisoned jscrambler releases, and monitor leak sites for Nihon Kotsu data.