Context.ai OAuth Token Compromise (Incident)
ID: 4f0e355c-949b-5ef6-bfc5-512bdbfe84bc
STIX ID: report--4f0e355c-949b-5ef6-bfc5-512bdbfe84bc
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2026-04-20
Date Updated: 2026-08-19
Author: [email protected] (Wiz Threat Research)
On 2026-04-19 Vercel disclosed that an attacker leveraged a compromised third-party AI tool (Context.ai) to obtain OAuth tokens and access a Vercel employee's Google Workspace, resulting in data exfiltration; Context.ai confirmed likely consumer OAuth token compromise and reporting suggests a possible infostealer infection at Context.ai, while claims of responsibility by an actor claiming ShinyHunters affiliation remain unverified.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.