Venezuela energy sector targeted by highly destructive Lotus wiper

Multiple high-impact cyber incidents reported: a destructive Lotus wiper campaign targeted Venezuela’s energy/utilities sector—using scripts to disable defenses and irrecoverably erase data; Lazarus stole $290M from Kelp DAO via LayerZero (a second $95M attempt blocked); and a Vercel breach resulted from a compromised third‑party AI tool (Context.ai) exposing an employee Google Workspace account and limited internal resources. Other notable items include a US man pleading guilty for secretly aiding BlackCat while working as a ransomware negotiator, CISA adding multiple product flaws (Cisco Cat