⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

Weekly security recap highlighting major breaches and emerging attack patterns across infrastructure and applications.

• •Vercel breach traced to compromise of third-party AI tool Context.ai, exposing internal systems and environment variables
• •Threat actors exploit trusted applications: Obsidian plugins deliver PHANTOMPULSE RAT, CPUID downloads serve STX RAT
• •PowMix botnet uses randomized C2 intervals to evade detection while targeting Czech workers
• •Pushpaganda campaign uses SEO poisoning and AI-generated content to push malicious notifications via Google Discover
• •108 Chrome extensions coordinate through shared C2 infrastructure to steal data and inject advertisements

This summary was automatically generated by AI based on the original article and may not be fully accurate.