Latest spy power reauthorization bill leaves critics unimpressed

Multiple high-impact security developments: a Vercel compromise has broadened, affecting more customers and third-party systems and increasing downstream supply-chain risk; US and UK agencies warn of “Firestarter” malware persisting on Cisco firewalls even after patches, including on a federal network (campaign dating back to at least Sept 2025); researchers mapped surveillance campaigns that exploit long‑known telecom signalling vulnerabilities to monitor operator infrastructure; allied agencies warn China-linked actors are building covert router-based networks; Dragos assesses the ZionSiphon