⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

A weekly security roundup covers multiple active threats including a Vercel-related hack, push notification fraud, QEMU being abused as an attack vector, and new Android remote access trojans (RATs) emerging in the wild. The attacks share a common theme of abusing trusted pathways—third-party tools, browser extensions, update channels, and legitimate software—to gain internal access rather than breaking systems directly. Developers should care because supply chain trust assumptions are being systematically exploited across multiple platforms and tooling ecosystems.