supply chainAIsmall businessinfrastructureVercel
Vercel Got Breached Through an AI Tool. Your SaaS Vendors Are Next.
An infostealer at a third-party AI company led to Vercel customer secrets being exposed. The attack chain: AI tool employee gets malware, attacker pivots to Vercel, customer API keys and DB credentials decrypted. Two months undetected.
Apr 20, 2026