Vercel Cloud Platform Hacked via Compromised Third-Party AI Tool
By
Terrence O’Brien
A bagel you'd recommend to a friend without hedging.
Summary
Vercel, a major cloud development platform, was hacked by the ShinyHunters group, who stole employee data including names, email addresses, and activity timestamps. The company confirmed a security incident affecting a limited subset of customers and attributed the attack to a compromised third-party AI tool. The hackers are attempting to sell the stolen data online.
Key quotes
· 4 pulledVercel, a major development platform that hosts and deploys web apps, was compromised, and the hackers are attempting to sell stolen data.
A person claiming to be a member of ShinyHunters, which was behind the recent hack of Rockstar Games, posted some data online, including employee names, email addresses, and activity time stamps.
Vercel confirmed in a post on X that a 'security incident' had occurred, and that it impacted a 'limited subset' of its customers.
Vercel said that a compromised third-party AI tool was the avenue for attack, though it did n
You might also wanna read
Vercel Discloses Security Breach as Hackers Claim to Sell Stolen Data
Cloud development platform Vercel has disclosed a security breach after threat actors claimed to have compromised its systems and are attemp
bleepingcomputer.com·1mo ago
Security Analysis: How a Roblox Cheat and AI Tool Compromise Led to Vercel Platform Breach
The article analyzes a major security breach where a Vercel employee's compromised Google Workspace account, accessed through an AI tool (Co
webmatrices.com·1mo ago
Vercel Discloses Security Breach Affecting Internal Systems and Limited Customer Subset
Vercel, a popular cloud platform for app development and deployment, has disclosed a security breach affecting its internal systems. The com
decipher.sc·1mo ago
Vercel Security Incident: Unauthorized Access to Internal Systems Under Investigation
Vercel has identified a security incident involving unauthorized access to certain internal systems. The company is actively investigating w
vercel.com·1mo ago
Vercel Security Breach: OAuth Supply Chain Attack Exposes Platform Environment Variable Risks
A security breach at Vercel exposed how a compromised third-party OAuth application provided long-term access to internal systems, bypassing
trendmicro.com·1mo ago
Charter Communications confirms data breach after ShinyHunters vishing attack
Charter Communications confirmed a data breach after the threat actor group ShinyHunters threatened to leak stolen data. The attackers claim
hendryadrian.com·5d ago