Japan's largest taxi operator shuts systems after cyberattack

Multiple high-risk incidents and active campaigns were reported: Japan's largest taxi operator Nihon Kotsu shut systems after a compromise and Lidl disclosed customer data stolen via a service-provider breach. A Jscrambler npm package was backdoored with an infostealer, and a new macOS infostealer dubbed CrashStealer impersonates Apple's crash reporter to harvest credentials, keychain data and crypto wallets. CISA warns of actively exploited RCE vulnerabilities in Joomla extensions (iCagenda, Balbooa Forms) enabling arbitrary file upload and remote code execution, while six new U-Boot boot‑/UE