Vercel, the company that provides Next.js, confirms it has suffered a security breach involving unauthorised access to internal systems via a compromised third-party AI tool. The attack was claimed by ...
The breach exposed non-sensitive environment variables, and a threat actor operating under the ShinyHunters name has claimed ...
Next.js developer Vercel has confirmed a cyber-incident conducted by a “highly sophisticated” attacker which may have ...
A Vercel employee's AI tool OAuth grant gave attackers access to internal systems via a four-hop kill chain. Here's what ...
Vercel has been hacked and had some customer credentials compromised after an employee's single OAuth token, which had been ...
Context.ai breach enabled Google Workspace takeover at Vercel, exposing limited customer credentials and prompting $2M data ...