Breaking news

Vercel Breach Exposes Customer Credentials In Supply Chain Attack

Incident Overview

Cloud hosting platform Vercel confirmed a security breach over the weekend that exposed sensitive customer credentials. Stolen data is reportedly being offered for sale online, raising concerns about vulnerabilities in software supply chains.

Method Of Breach

According to the company, the incident originated from an external tool developed by Context AI. An employee installed the application and connected it to a corporate Google account via OAuth. Attackers exploited this access to take control of the account and retrieve unencrypted credentials stored within internal systems.

Impact On Services

Core products, including Next.js and Turbopack, were not affected by the breach. However, Vercel has contacted customers whose application data and security keys may have been exposed, advising them to rotate credentials as a precaution.

Corporate Response And Immediate Guidelines

In a public update, Vercel CEO Guillermo Rauch urged customers to update all relevant keys and credentials used in deployments. Details about the attackers remain limited, although the threat actor has claimed links to the ShinyHunters group, known for previous breaches involving cloud and database services.

Broader Supply Chain Implications

The incident reflects a broader rise in supply chain attacks targeting widely used tools and integrations. Compromising a single application can provide access to multiple organizations, increasing the scale and impact of such breaches.

Context AI Breach Clarification

Context AI confirmed a separate security incident in March involving its Office Suite application. Initial disclosures suggested limited impact, but the company now indicates that compromised OAuth tokens may have affected a wider group of users. Investigation into the breach is ongoing, with several aspects, including attacker intent, still unclear.

Conclusion

The Vercel incident highlights risks associated with interconnected systems and third-party integrations. Companies are expected to reassess access controls and strengthen security practices to mitigate similar threats.

Paramount Closes $110 Billion Warner Bros. Discovery Deal, Creating Skydance Entertainment Giant

Paramount has completed its $110 billion acquisition of Warner Bros. Discovery, bringing together two of the most powerful names in media under a new combined company, Skydance. The deal, announced Tuesday, creates one of the largest entertainment mergers ever completed and reshapes the competitive landscape across streaming, film, television and cable.

A New Power Center In Global Entertainment

The combined company unites Paramount+ and HBO Max, alongside a broad portfolio of networks that includes CBS, CNN, MTV, TBS, Comedy Central and Food Network. It also gives Skydance control over some of the industry’s most valuable franchises, including The Lord of the Rings, Game of Thrones, the DC Universe and Yellowstone.

For the industry, the scale of the transaction is as significant as the assets themselves. In an era defined by streaming competition and rising content costs, ownership of established intellectual property has become a strategic advantage akin to controlling a premium distribution network in a previous media cycle.

Ellison Expands His Influence

The merger places one of the world’s largest entertainment studios under the control of David Ellison, who only last year completed the combination of Skydance Media and Paramount. With this latest transaction, Ellison is accelerating his rise as one of Hollywood’s most influential executives.

The Ellison family remains Skydance’s largest shareholder, backed by the financial power of Larry Ellison, the Oracle co-founder and David Ellison’s father. That support gives the company considerable flexibility as it integrates two sprawling media businesses and seeks to compete more aggressively across platforms.

Legal Hurdles Cleared Before Closing

The deal’s completion follows settlements with a coalition of U.S. states and a Hollywood writers’ union, removing the principal legal obstacles that had threatened to delay or derail the merger.

Paramount first announced in February that it would pursue Warner Bros. Discovery after a bidding contest with Netflix, which had earlier struck its own agreement to acquire Warner Bros.’ film and television studios and streaming operations, excluding the cable networks. Paramount strengthened its offer by promising shareholders additional cash if the deal failed to close by a set deadline and by agreeing to cover the breakup fee owed to Netflix.

What Skydance Says Comes Next

“Today is a historic day, not just for Skydance but for our entire industry,” Ellison said in a statement. “From the start, our ambition was to bring these two storied studios together and create a stronger competitor, with the talent, resources, and reach to tell great stories in every genre, on every platform, for audiences everywhere. Our focus now turns to the future: building a company that empowers creatives, entertains audiences and rewards shareholders. We couldn’t be more excited to get to work.”

Skydance said the combined company will generate nearly $70 billion in annual revenue. The company’s Class B shares are set to begin trading on the New York Stock Exchange today under the ticker symbol SKYD.

Uol
Aretilaw firm
eCredo
The Future Forbes Realty Global Properties

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter