On April 23, Vercel CEO Guillermo Rauch announced on Twitter that the team has completed an in-depth security investigation, analyzing nearly 1PB of complete Vercel network and API logs, far exceeding the initial Context.ai account breach incident. The investigation revealed that the attackers' activities extended beyond Context.ai and have distributed malware more broadly, targeting the theft of account keys from platforms like Vercel. Once the keys are obtained, attackers can quickly and comprehensively enumerate non-sensitive environment variables. Current measures include deepening collaboration with industry partners such as Microsoft, AWS, and Wiz to jointly protect the broader internet ecosystem; other suspected victims have been notified and advised to immediately rotate credentials and strengthen security best practices.
All Comments