NEPA issues caution in using Wag Water River after oil spill in Brandon Hill KINGSTON, Jamaica—Members of the public are being advised to exercise caution in using the Wag Water River following an incident in which a tanker transporting diesel fuel overturned into the ravine. According to the National Environment and Planning Agency (NEPA), the incident occurred about 2:00 am on Wednesday, May 6, in the vicinity of Brandon Hill, St Andrew on the Junction main road. The agency said the fire department responded and has been on the scene working to secure the fuel and ensure public safety.
Original (en)
KINGSTON, Jamaica—Members of the public are being advised to exercise caution in using the Wag Water River following an incident in which a tanker transporting diesel fuel overturned into the ravine. According to the National Environment and Planning Agency (NEPA), the incident occurred about 2:00 am on Wednesday, May 6, in the vicinity of Brandon Hill, St Andrew on the Junction main road. The agency said the fire department responded and has been on the scene working to secure the fuel and ensure public safety. “Based on investigation by the National Environment and Planning Agency (NEPA), NEPA can confirm that some amount of fuel has entered the Wag Water River as an oil sheen was observed in the proximity of the incident. NEPA will continue to assess the situation to determine the full extent of the impact and will provide further updates as more information becomes available,” the agency added.
Published
May 7, 2026, 03:23 AM UTC
6d ago
Significance
Entities Detected
· click + to trackGoogle Threat Intelligence reports a sophisticated supply chain attack on axios NPM package versions 1.14.1 and 0.30.4 (March 31, 2026), where attackers injected malicious 'plain-crypto-js' dependency to deploy WAVESHAPER.V2 backdoor across Windows, macOS, and Linux platforms. Attribution to UNC1069 based on malware signatures, infrastructure overlaps, and operational patterns. Remediation guidance includes version pinning, dependency auditing, CI/CD pipeline security, and credential rotation.
A critical remote code execution vulnerability (CVE-2026-1731) has been identified in remote monitoring and management software that could be exploited to deploy ransomware and compromise supply chain integrity. The flaw enables attackers to execute arbitrary code, creating significant risk for downstream organizations and critical infrastructure.
Bitwarden CLI, the command-line interface for the password manager Bitwarden, has been compromised as part of a newly discovered Checkmarx supply chain campaign. The affected package version is @bitwarden/cli@2026.4.0, with malicious code published in 'bw1.js,' according to findings from JFrog and Socket.
0c30828f…openwatch.io →