Vercel attack fallout expands to more customers and third-party systems

This CyberScoop collection highlights a wave of high-risk cyber activity and related policy developments: a Vercel compromise has expanded to more customers and third-party systems, creating undefined but significant downstream risk; US and UK agencies warn of a persistent malware campaign (dubbed “Firestarter”) that remained on Cisco firewalls long after patches were applied; Dragos assesses a new AI‑assisted ICS malware (ZionSiphon) targeting water plants as largely ineffective/hyped; researchers mapped surveillance campaigns that leverage commercial surveillance tools to exploit long-known