Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3
Vercel has patched two critical remote code execution flaws in Next.js: one that triggers when the framework optimizes an attacker-supplied AVIF imag…
Vercel
Vercel Hacked: Breach Is Bigger Than First Disclosed — Customer Data Stolen Before the Attack Even Started
What began as a contained supply chain incident has quietly expanded into something far more serious. Vercel has updated its April 2026 security bull…
Vercel Hacked Through an AI Tool — And Your Google Workspace Could Be Next
A third-party AI tool trusted by a single Vercel employee turned into the entry point for one of the most closely-watched cloud infrastructure breach…