Explore

Trendline Trendline
Vercel Confirms Security Breach, Customer Data Compromised

Vercel Confirms Security Breach, Customer Data Compromised

Vercel Confirms Security Breach, Customer Data Compromised
Trendline Trendline
Vercel Security Breach Linked to Context AI Hack Compromises Customer Credentials

Vercel Security Breach Linked to Context AI Hack Compromises Customer Credentials

Vercel Security Breach Linked to Context AI Hack Compromises Customer Credentials
Trendline Trendline
Vercel Confirms Data Breach, Compromising Customer Credentials

Vercel Confirms Data Breach, Compromising Customer Credentials

Vercel Confirms Data Breach, Compromising Customer Credentials
Trendline Trendline
Vercel Reports Data Breach Due to Compromised AI Application

Vercel Reports Data Breach Due to Compromised AI Application

Vercel Reports Data Breach Due to Compromised AI Application
Trendline Trendline
Vercel Security Breach Prompts Urgent Secrets Rotation for Customers

Vercel Security Breach Prompts Urgent Secrets Rotation for Customers

Vercel Security Breach Prompts Urgent Secrets Rotation for Customers
Rapid Read Rapid Read
Vercel Security Breach Linked to Third-Party Malware Attack

Vercel Security Breach Linked to Third-Party Malware Attack

Vercel, a company known for maintaining Next.js and other open-source libraries, has reported a security breach resulting from a third-party malware attack. The breach originated from a Context.ai employee's computer infected with Lumma Stealer malware, disguised as Roblox cheats. This allowed attackers to access Context's AWS environment and OAuth tokens, including a token for a Vercel employee's Google Workspace account. The attackers used this access to compromise Vercel's systems, affecting a limited number of customers. Vercel has advised impacted customers to rotate credentials and is investigating the breach with CrowdStrike and Mandiant.
Rapid Read Rapid Read
Vercel Faces Security Breach, Advises Customers on Secrets Rotation

Vercel Faces Security Breach, Advises Customers on Secrets Rotation

Vercel, a cloud application deployment platform, has reported a security incident involving unauthorized access to some of its internal systems. The breach appears to be a supply chain attack, and Vercel is advising its customers to rotate their secrets, such as API keys and database credentials. The incident was linked to a compromise of a third-party AI tool integrated with Vercel's environment, which granted attackers privileged access. The company is investigating the breach with the help of experts and law enforcement, and has published an indicator of compromise for affected users. Vercel's CEO, Guillermo Rauch, stated that the number of impacted customers is limited, though the compromise potentially affected hundreds of users across various organizations.
Trendline Trendline
Vercel Security Breach Prompts Customer Action on Secrets Rotation

Vercel Security Breach Prompts Customer Action on Secrets Rotation

Vercel Security Breach Prompts Customer Action on Secrets Rotation
Trendline Trendline
Vercel Confirms Security Breach Amid Hacker Claims of Selling Stolen Data

Vercel Confirms Security Breach Amid Hacker Claims of Selling Stolen Data

Vercel Confirms Security Breach Amid Hacker Claims of Selling Stolen Data
Rapid Read Rapid Read
Mastodon Faces DDoS Attack, Causing Service Disruptions

Mastodon Faces DDoS Attack, Causing Service Disruptions

Mastodon, a decentralized social networking software, experienced a distributed denial-of-service (DDoS) attack on its flagship server, mastodon.social, rendering the site unusable at times. The attack led to widespread inaccessibility, with users encountering error messages and outage warnings. Mastodon reported the incident early Monday morning and implemented countermeasures by 9:05 a.m. ET, restoring accessibility but warning of potential ongoing instability. This cyberattack follows a similar incident involving Bluesky, another decentralized social network, which faced a prolonged DDoS attack but has since stabilized. Mastodon has not disclosed the cause of the attack, and representatives have yet to comment further.
Rapid Read Rapid Read
Bluesky Faces Service Disruptions Due to DDoS Attack

Bluesky Faces Service Disruptions Due to DDoS Attack

Bluesky, a social media company, is experiencing ongoing service disruptions due to a sophisticated Distributed Denial-of-Service (DDoS) attack. The attack began on April 15, 2026, and has caused intermittent outages affecting users' ability to access feeds, notifications, threads, and search functions. Despite the disruptions, Bluesky has confirmed that there is no evidence of unauthorized access to private data. The company is working to mitigate the attack and plans to provide updates on the situation.
Trendline Trendline
Hackers Exploit Unpatched Windows Flaws to Breach Organizations

Hackers Exploit Unpatched Windows Flaws to Breach Organizations

Hackers Exploit Unpatched Windows Flaws to Breach Organizations