Vercel Finds More Compromised Accounts in Context.ai-Linked Breach

Vercel disclosed that attackers leveraged a compromised Context.ai integration and a seized Google Workspace account to pivot into Vercel, enabling enumeration and decryption of environment variables and access to customer accounts; follow-up investigation linked the intrusion to a Lumma Stealer infection on a Context.ai employee and found additional preexisting account compromises, highlighting risks from OAuth-integrated SaaS and rapid attacker lateral movement.