← Back to context

Comment by ethbr1

8 hours ago

Taking this at face value: https://www.infostealers.com/article/breaking-vercel-breach-...

   Context.ai employee searches for Roblox exploits on web
   -> Context.ai support access breached by malware
   -> Vercel privileged employee account who uses Context.ai breached
   -> Vercel customer secrets breached

Tl;dr - insufficient endpoint protection and activity detection at Context.ai (big surprise!) + insufficient privileged account isolation at Vercel

0 comments

ethbr1

Reply