One Employee. One OAuth Token. The Vercel Breach Explained

Vercel confirmed a security breach on April 18-19, 2026, tracing back to a compromised third-party AI tool and a single employee's Google Workspace connection. Here is the full attack chain, what was actually exposed, and what you need to do right now.

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.