One careless download can cascade across companies

One careless download can cascade across companies.

In February 2026, an employee at Context.ai installed a Roblox cheat.
Hidden inside: Lumma Stealer malware.

That single action didn’t just compromise a laptop.
It became an entry point into internal systems... and ultimately contributed to a breach affecting Vercel.
No zero-day exploit.
No sophisticated nation-state attack.
Just a bad decision at the edge.

Your security is only as strong as your least careful employee.
“Non-work” actions on work devices are still attack vectors.
Supply chain risk now includes human behavior, not just vendors.

Most companies over-invest in perimeter defenses and under-invest in behavioral risk.
Firewalls don’t stop curiosity.
Policies don’t stop convenience.

How many ways can a normal employee accidentally bypass them?

Discuss on LinkedIn