Vercel got hacked because an employee clicked 'Allow' on an OAuth prompt. We all

<p>A Vercel employee signed up for an AI tool. They clicked Allow All on the OAuth consent screen. Three weeks later, customer environment variables were sitting on a hacker's

<p>The rapid adoption of AI productivity tools is exposing a dangerous blind spot in enterprise security architecture. Organizations invest heavily in firewalls, SSO, and MFA not

A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach shows a compromised OAuth app can lead to widespread

<a href="https://news.ycombinator.com/item?id=47851634">Comments</a>

<p>On April 19, 2026, Vercel confirmed a security incident involving unauthorized access to their internal systems. The breach originated through a compromised third-party AI tool

<p>In 2003, running the cyber café at 16, I learned something that took me twenty years to put into words: trust without a model is negligence with good PR. We had eight machines