⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

Summary: Vercel disclosed a breach in which attackers compromised the third-party AI tool Context.ai, used that access to take over an employee's Vercel Google Workspace account, and reached some Vercel environments and environment variables not marked as sensitive. A threat actor using the ShinyHunters persona claimed responsibility, and Hudson Rock found that a Context.ai employee was compromised with Lumma Stealer in February 2026, raising the possibility the infection triggered the supply chain escalation.
What's compelling: The entry point was a third-party AI tool and a single employee account, and the attacker still reached internal environments through variables that were never flagged as sensitive - a reminder that your trust boundary extends to every vendor tool your staff logs into.

Read the original at The Hacker News ↗

Topics: Data Breaches
Mentions: CVE-2025-0520 CVE-2025-50892 CVE-2025-54236 CVE-2026-1492 CVE-2026-20147 CVE-2026-20180 CVE-2026-20184 CVE-2026-20186 CVE-2026-20204 CVE-2026-20205 CVE-2026-22039 CVE-2026-23818 CVE-2026-26980 CVE-2026-27304 CVE-2026-27681 CVE-2026-29146 CVE-2026-32196 CVE-2026-32201 CVE-2026-33032 CVE-2026-33413 CVE-2026-34078 CVE-2026-34486 CVE-2026-34622 CVE-2026-39808 CVE-2026-39813 CVE-2026-40175 CVE-2026-40176 CVE-2026-40261 CVE-2026-40478 CVE-2026-40871 CVE-2026-41242 CVE-2026-5747 CVE-2026-5873 CVE-2026-6296 CVE-2026-6297 CVE-2026-6298 CVE-2026-6299 CVE-2026-6358
Related: Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution Cyber Risks ·
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More Cyber Risks ·
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More Cyber Risks ·