The Vercel Breach Is a Mobile Supply-Chain Problem, Too (opens in new tab)

Today Vercel confirmed a security incident but the real risk may not be where most teams are looking. Attackers reportedly pivoted through a compromised OAuth grant at Context AI, took over a Vercel employee’s Google account, and accessed customer API keys, source code and database contents. Vercel has advised customers to rotate anything marked “non-sensitive.” […] The post The Vercel Breach Is a Mobile Supply-Chain Problem, Too appeared first on NowSecure.