Post by @securedbycasco

Vercel got hacked and their internal database is being sold for $2 million. Rotate your environment variables, audit your activity logs, and rotate any deployment tokens ASAP. The attack started at Context.ai, a third-party tool used by Vercel. An employee there downloaded Roblox cheats on their work laptop. What he didn’t know was, the cheat had malware hidden inside that scraped every credential on the machine. The attackers used those credentials to get into a Vercel employee’s Google Workspace account and escalated into Vercel’s internal systems. The CEO believes the attackers were significantly accelerated by AI, given how fast they moved and how well they understood Vercel’s systems. #Tech #cybersecurity #hacks