Just saw SlowMist's CISO posted some important stuff about the Vercel breach. Basically if you've got Vercel integrated with your Google workspace, you need to check your API access right now. Go to Google Admin, search for that ID they listed (110671459871-30f1spbu0hptbs60cb4vsmv79i7bbvqj) in the app access control section and revoke it immediately if it's there. Pretty wild that SlowMist had to put out a public PSA for this. Apparently hackers got into Vercel's systems and were trying to sell the data for millions. SlowMist's been on top of tracking this stuff, so if they're flagging it, probably worth taking seriously. Anyone else using Vercel here? The SlowMist recommendation is pretty straightforward at least - just takes a few minutes to check and secure. Better safe than sorry with this kind of thing.

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin