The Vercel incident was very simple. An employee connected an external AI tool to the company's Google Workspace through OAuth, and an attacker took over the account. From there, he had access to any internal data not marked as sensitive. Clearly, this is not a real hack or a notorious zero-day exploitation. Eventually, someone, legitimately, […]



