Vercel, the company that provides Next.js, confirms it has suffered a security breach involving unauthorised access to internal systems via a compromised third-party AI tool. The attack was claimed by ...
A Vercel employee's AI tool OAuth grant gave attackers access to internal systems via a four-hop kill chain. Here's what ...
The breach exposed non-sensitive environment variables, and a threat actor operating under the ShinyHunters name has claimed ...
Vercel has been hacked and had some customer credentials compromised after an employee's single OAuth token, which had been ...
Next.js developer Vercel has confirmed a cyber-incident conducted by a “highly sophisticated” attacker which may have ...