Breach tied to compromised AI tool may have exposed credentials used by app frontends, the user-facing layer that connects ...

A Vercel employee's AI tool OAuth grant gave attackers access to internal systems via a four-hop kill chain. Here's what ...

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

Vercel breached after attacker compromised Context.ai, hijacked an employee's Google Workspace via OAuth, and accessed ...

Vercel confirmed that attackers accessed parts of its internal systems via a compromised third-party AI tool that used Google ...

AI agents are moving fast, but without clear identity and control, they become chaos machines.

Without an identity layer, AI agents accessing enterprise tools create real exposure: data exfiltration through unscoped ...

A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy ...

Gopuff, the Philadelphia-based, privately owned snack delivery service with warehouses in more than 500 U.S. and U.K.