🥤 Coca-Cola Ransomware, 🇯🇵 Nichirei Cold Chain Hit, 🔴 SharePoint KEV Cluster Grows, 🍎 ClickLock macOS Stealer, 🕷️ Scattered Spider Sentenced

Coca-Cola confirmed a ransomware attack on its Fairlife subsidiary that suspended US dairy production, disclosed in an SEC filing with no group claim and no answer yet on whether data was stolen. Ransomware that halts a national food production line converts a data crime into a physical supply chain event. Coca-Cola Fairlife: Ransomware Attack Halts U.S. Dairy Production Nationwide

Nichirei, Japan's largest cold-chain logistics operator, is recovering from a cyberattack that disrupted food deliveries and hit KFC Japan supply, the second Japanese transport and logistics incident in two weeks. Concentrated logistics operators make cascading supply chain risk predictable. Nichirei Cyberattack Disrupts Japan's Largest Cold-Chain Logistics Network, Hits KFC Japan Supply

Two macOS stealers show the credential-harvesting economy maturing. ClickLock kills every visible process until the user types a password, and OkoBot's SeedHunter injects fake recovery screens into Trezor and Ledger wallets. The Scattered Spider sentences for the Transport for London attack are the first real accountability for a group tied to millions in extortion, and the 23andMe settlement is a catalog of what basic account hygiene failures cost. CISA added the SharePoint RCE and two FortiSandbox flaws to KEV with a July 19 deadline.

Watchlist: verify patch status for SharePoint and FortiSandbox before the deadline, and check continuity plans for ransomware scenarios at food and cold-chain suppliers.