US Edition
Hack at Vercel sends crypto developers scrambling to lock down API keys
Vercel said a limited subset of customers was affected as it investigates whether attackers exfiltrated access keys, source code and API keys.
- Cloud development platform Vercel disclosed a security incident after threat actors claiming to be "ShinyHunters" alleged they breached internal systems and accessed company data.
- The company traced the intrusion to a compromised Google Workspace connection within Context, a third-party AI tool used by an employee, allowing attackers to escalate access into internal environments.
- Attackers potentially accessed API keys and 580 employee records containing names and timestamps, while the threat actor alleged a $2 million ransom demand in Telegram messages.
- Solana-Based decentralized exchange Orca rotated all deployment credentials as a precaution, while Vercel advised customers to rotate secrets and use its sensitive environment variable feature.
- This incident adds to a difficult April for crypto, following a $292 million exploit of Kelp DAO and a $285 million attack on Drift linked to North Korea-affiliated actors.
25 Articles
25 Articles
Vercel hacked, hacker using ShinyHunters name to sell data for $2 million
Vercel, a cloud platform that hosts and deploys web apps, was recently compromised in a cyberattack stemming from an AI tool. The company says that no sensitive data was accessed after hackers claimed to be selling Vercel customer data online. Vercel has clients such as OpenAI, Cursor, Bose, and Pinterest.
Cloud development platform Vercel was hacked
Vercel, a major development platform that hosts and deploys web apps, was compromised, and the hackers are attempting to sell stolen data. A person claiming to be a member of ShinyHunters, which was behind the recent hack of Rockstar Games, posted some data online, including employee names, email addresses, and activity time stamps. Vercel confirmed in a post on X that a "security incident" had occurred, and that it impacted a "limited subset" o…
Next.js Creator Vercel Hacked
Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million. The post Next.js Creator Vercel Hacked appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Next.js Creator Vercel Hacked The post Next.js Creator Vercel Hacked appeared first on IT Security News.
Internal Vercel systems and thus customer data were compromised in a security incident. An external AI tool served as a gateway.
Coverage Details
Bias Distribution
- 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
