←All topics

editorial

2 pieces of writing

security10 min read

Vercel breached through a compromised Context.ai OAuth grant

A compromised AI productivity tool called Context.ai gave attackers OAuth access to a Vercel employee's Google Workspace, pivoting into internal systems. The AI tool supply chain is the new CI/CD supply chain.

cloud-security10 min read

Non-human identities outnumber humans 45 to 1 in cloud environments and most have no monitoring at all