
PANews April 20 news, Vercel CEO Guillermo Rauch posted on the X platform that the team is currently conducting a comprehensive investigation into the company's security incident. The incident originated when a Vercel employee was compromised due to the AI platform client Context.ai being hacked, and the attacker further gained access to the Vercel environment through the employee's compromised Google Workspace account. All customer environment variables stored by Vercel are fully encrypted, but the attacker exploited environment variables marked as "non-sensitive" through enumeration. Vercel believes the attacker's techniques are highly sophisticated and possibly greatly enhanced the speed and efficiency of the attack using AI. Currently, the number of affected customers is quite limited, and relevant customers have been prioritized for contact. Vercel advises all customers to follow the security notice, rotate keys, monitor access permissions, and correctly use the sensitive environment variable feature.
免责声明:本文章仅代表作者个人观点,不代表本平台的立场和观点。本文章仅供信息分享,不构成对任何人的任何投资建议。用户与作者之间的任何争议,与本平台无关。如网页中刊载的文章或图片涉及侵权,请提供相关的权利证明和身份证明发送邮件到support@aicoin.com,本平台相关工作人员将会进行核查。