Lumma Stealer

European governments sanctioned Russian individuals and organizations linked to cyberespionage group Turla and destructive attacks, including FSB's Center 16 and GRU figures. The EU and UK cited Turla's 2010–2023 operations targeting European nations and Poland's 2022 energy grid attack.

Vercel confirmed a security breach impacting more customers than initially reported, with evidence of malware distribution targeting Vercel accounts and third-party systems. The attack originated from Context.ai, a third-party AI tool, and involved the theft of environment variables and API misuse. Vercel stated no software tampering was found, but downstream risks persist.

Vercel experienced a security breach where attackers used malware disguised as Roblox cheats to compromise an employee's device at Context.ai, leading to stolen credentials and access to Vercel environments. The attack exploited interconnected systems and overly privileged permissions, with threat group ShinyHunters claiming responsibility and attempting to sell stolen data.