Vercel rolls out new protection against stolen session cookie attacks

BleepingComputer security roundup covering active exploitation of a WordPress RCE and a Zyxel network-switch zero-day, supply-chain compromises, credential and session theft, phishing that bypasses MFA, ransomware-like operational disruption, cloud resource abuse, major data breaches, and large-scale cryptocurrency theft. The highest-risk items involve actively exploited vulnerabilities, compromised software update mechanisms, and attacks affecting critical infrastructure and digital assets.