"Some customers are affected" is a phrase I hear every time, but everyone is more concerned: Are there credential leaks? Is there lateral movement? Is there secondary risk?

Cloud development platform Vercel disclosed on Sunday that attackers compromised parts of its internal systems through a third-party AI tool linked to a Google Workspace OAuth app, according to the company's official statement. A limited subset of customers was affected, and Vercel's services