Vercel confirms breach as hackers claim to be selling stolen data

Multiple high-impact incidents and active exploitation reports across cloud services, open-source libraries, and Windows environments. Vercel confirmed a breach with stolen data being offered for sale; attackers are abusing Apple account-change emails to deliver phishing; a critical remote code execution flaw in protobuf.js has public PoC; CISA warns of active exploitation of a high-severity Apache ActiveMQ vulnerability; and recently leaked Windows zero-days are being used to escalate privileges. Other notable items include a novel ransomware evasion technique using QEMU VMs, April Microsoft/