provider of web infrastructure Vercel has revealed a security flaw that gives malicious actors access to “certain” internal Vercel systems without authorization.
An employee of the organization used Context.ai, a third-party artificial intelligence (AI) platform, which was compromised.
According to a bulletin from the firm, the attacker gained access to some Vercel environments and environment variables that were not designated as “sensitive” by using that access to take over the employee’s Vercel Google Workspace account.
According to Vercel, environment variables designated as “sensitive” are encrypted to make them unreadable, and there is currently no proof that the attacker was able to access such values read more about Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.