GoPlus Security 🚦 (@GoPlusSecurity): 🚨Vercel employees were targeted in an AI supply chain attack. Please ensure you verify the Sensitive flag on your environment variables to prevent the…

🚨Vercel employees were targeted in an AI supply chain attack. Please ensure you verify the Sensitive flag on your environment variables to prevent the leakage of critical data. I. Attack Chain Analysis 1. Supply chain entry-point compromise: The attackers compromised a third-party AI tool, Context[.]ai, and used it as a stepping stone to execute a supply chain attack. 2. OAuth credential hijacking: Internal Vercel employees had previously authorized this AI tool via Google Workspace. The attackers exploited this trust relationship to steal associated OAuth access tokens. 3. MFA bypass and account takeover: Using the legitimately stolen OAuth tokens, the attackers bypassed enterprise Single Sign-On (SSO) and Multi-Factor Authentication (MFA), successfully taking over the employees’ Google Workspace accounts. 4. Internal lateral movement: With valid internal identity access, the attackers rapidly moved laterally within Vercel’s internal infrastructure, reaching production environments and core business systems. 5.Execution of the attack: The attackers enumerated internal systems and systematically exfiltrated sensitive core data at scale. II. Remediation and Defense Guidelines 1. Credentials stored in environment variables not marked as Sensitive may already be exposed. Immediately rotate high-privilege credentials such as GitHub/NPM tokens, database passwords, and cloud access keys (AK/SK). 2. Conduct a full audit of project configurations and enforce enabling the Sensitive flag for all confidential environment variables. 3. Review recent Vercel logs for API call traces and IP activity, and revoke redundant or unused third-party integrations and authorizations. Incident report below 👇 https://vercel.com/kb/bulletin/vercel-april-2026-security-incident