Vercel confirms breach as hackers claim to be selling stolen data

Multiple high-risk incidents and active exploitations were reported: Vercel confirmed a breach with threat actors attempting to sell stolen data; a critical remote code execution flaw in protobuf.js has public PoC; CISA warned of active exploitation of a high-severity Apache ActiveMQ vulnerability; recently leaked Windows zero-days are being used to gain elevated privileges. Attackers continue to innovate (Payouts King using QEMU VMs to evade endpoint security) and phishing is being amplified via abused Apple account-change emails. Organizations should urgently review exposures tied to cloud/S