TLDR Tech / IT
Vercel Breach Tied to Third-Party AI Tool Access
Vercel disclosed a breach that appears to have stemmed from a compromised OAuth token linked to an employee's use of a third-party AI tool, Context.ai, through a corporate Google Workspace account. The story is a sharp reminder that “shadow AI” risk is not just model usage risk anymore; it is also OAuth scope sprawl, app approval hygiene, and employee-side SaaS exposure.
Read the full story