Cybersecurity briefing — 2026-04-20

A breach at cloud development platform Vercel has security teams rotating secrets this morning, while Microsoft ships emergency patches for domain controller crashes caused by its own April updates.

• Vercel Breach via Compromised Context.ai Exposes Customer Credentials
• 20 New Vulnerabilities Found in Serial-to-IP Converters Affecting OT and Healthcare
• North Korean 'TraderTraitor' blamed for $290M KelpDAO heist
• End-of-Life TP-Link Routers Face Botnet Infection Attempts
• The Gentlemen RaaS deploys SystemBC proxy botnet to infect corporations
• Water Plant Sabotage Malware Is One Bug Away
• Formbook Phishing Adds Redundant Delivery Paths
• Bluesky Outages Push Users Toward Rival Networks
• Session Spikes Warn Before Network CVE Disclosures
• Windows Server Patch Breaks Domain Controllers
• Internet-Exposed Ivanti EPMM Appliances Face Active RCE Exploits
• MCPHub Auth Bypass Lets Unauthenticated Users Act Privileged