Vercel attack fallout expands to more customers and third-party systems

2026-04-24T02:51:42Z9cc742ec0b222c9aa208ec671b53493f5874723a9e9b07157c712b433114b078
ai-securitychinacisaciscocisocloud-compromisecommercial-surveillance-toolscovert-networksfirestarterfirewall-malwaregeofence-warrantsnational-privacy-billot-securityprivacy-legislationreal-time-risk-managementrouter-compromisesignalling-infrastructuresupply-chainsupreme-courttelecom-vulnerabilitiesthird-party-riskuk-ncscvercelwater-sectorzionsiphon

What happened

This feed summarizes multiple CyberScoop reports: a Vercel incident that is expanding across customers and third‑party systems, persistent firewall compromise by the “Firestarter” malware on Cisco devices even after patches, and a new OT malware (ZionSiphon) targeting water infrastructure that researchers call largely ineffective. Additional reporting covers surveillance campaigns abusing long‑known telecom signalling vulnerabilities, allied agencies warning of Chinese actors building covert networks out of consumer routers, policy and legal developments (CISA director nominee withdrawal, a US

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cyberscoop
Record identifier
9cc742ec0b222c9aa208ec671b53493f5874723a9e9b07157c712b433114b078
Enrichment time
2026-04-24T02:51:42Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Vercel attack fallout expands to more customers and third-party systems · Baitaphish