2026年7月6日の
セキュリティ情報

Subject: [Alert] North Korean Supply Chain Attacks Targeting Open Source Developers

Dear Team,

This is a technical alert regarding a supply chain campaign by the North Korean threat actor PolinRider.

■ Overview
PolinRider is compromising maintainer accounts to inject malicious JavaScript loaders into legitimate repositories across NPM, Packagist, Go modules, and Chrome extensions. These loaders deliver the DEV#POPPER RAT and OmniStealer. Notably, the attackers use Git history rewriting to disguise the timing of malicious commits and evade detection.

■ Scope
- Users of NPM, Packagist, Go modules, and Chrome extensions.
- 108 unique packages identified as malicious by Socket.

■ Recommended Actions
1. Audit current project dependencies for any unexpected or suspicious version updates.
2. Enforce Multi-Factor Authentication (MFA) for all developer and maintainer accounts.
3. Utilize Software Composition Analysis (SCA) tools to scan for known malicious artifacts.

■ Reference
- Socket Security Report

Priority: High
Deadline: Immediate

Subject: [Security Alert] Caution Regarding AI Tool Usage and Fraudulent Sites

Hi everyone,
We have observed sophisticated scams that target AI agents to trick users into making cryptocurrency payments via fraudulent websites.

What we need from you:
1. If an AI tool directs you to a website that requests payments or personal information, do not comply.
2. Always verify that any software libraries (e.g., Python packages) are being installed from official and trusted sources.

Deadline: Immediate

Subject: [Security Advisory] Critical Vulnerabilities in JetBrains Hub (CVE-2026-50242 et al.)

Dear IT/Security Team,

We are sharing critical vulnerability information regarding JetBrains Hub.

■ Overview
Three critical vulnerabilities have been identified in JetBrains Hub. Most notably, CVE-2026-50242 (CVSS 10.0) allows an attacker to bypass authentication via direct database access and obtain administrator privileges.

■ Scope
- Product: JetBrains Hub
- Impact: Full account takeover, privilege escalation, and administrative access.

■ Remediation
1. Verify the current version of JetBrains Hub in your environment.
2. Update to the patched versions (e.g., 2026.1 or 2024.2 branches).

■ Reference
- JetBrains Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Security Alert] Beware of Phishing Emails Impersonating Tax Authorities

Dear employees,
We have observed sophisticated phishing emails impersonating tax authorities that attempt to trick users into installing fake tax filing software.

Requested Actions:
1. Do not open attachments from unknown senders regarding "tax filings" or "refunds."
2. Avoid clicking links that prompt you to install software.
3. Report any suspicious emails to the IT security team immediately.

Deadline: Immediate

Subject: [Security Alert] Beware of Phishing Emails Following Data Breaches

Dear employees,

A large-scale data breach has recently occurred at an educational institution abroad. Please be aware that leaked personal information is often used in sophisticated phishing attacks.

Requested Actions:
1. Do not click on suspicious links or open attachments from unknown senders.
2. Avoid reusing passwords across different services and enable two-factor authentication (2FA) wherever possible.

Deadline: Immediate