Supply Chain Attack Hits Vercel: User Data is Being Sold on BreachForums For $2M
· Source: ox.security
In short
A supply chain attack compromised Vercel through Context AI, where a compromised Context AI employee's credentials led to a Vercel database breach. The stolen data is being sold on BreachForums for $2 million, potentially exposing API keys, GitHub tokens, and NPM accounts. The incident highlights security vulnerabilities in AI systems and the importance of key rotation and third-party access auditing.
Read Original Article — Read the full article on the publisher’s site.
Tags: security, supply-chain, breach, cybersecurity, data-protection, threat-analysis