OAuth hijacked: How a third-party breach hit Vercel
ID: 317b195e-b44e-57ab-a5dd-0e4edcdbe646
STIX ID: report--317b195e-b44e-57ab-a5dd-0e4edcdbe646
Feed Name: Expel Blog
Threat Score
On April 19 Vercel disclosed that attackers leveraged a compromised Context AI OAuth grant to access and exfiltrate data; the report notes the abused OAuth client ID was published and recommends hunting for the client ID, auditing OAuth consent grants, and restricting third-party app permissions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.