Vercel April 2026 security incident
26 points by figsoda
26 points by figsoda
some context: https://nitter.net/DiffeKey/status/2045813085408051670
Isn't Vercel a service provider? Why would they have stuff, much less important stuff, with Google? Does nobody host their own stuff any more?
It's not that surprising that Vercel use Google Docs. If they have Google Docs I would bet their corporate SSO is managed by Google as well.
So this time it's a supply chain attack as well, but with a 3rd party application installed in the corporate word processor...