Vercel Security Breach Compromises Internal Systems and Customer Data via External AI Tool

Vercel, the manufacturer of the Next.js framework, experienced a security incident where internal systems and customer data were compromised. The breach occurred via an external AI tool used as an entry point, though specific technical details about the tool or attack vector were not disclosed. No exact dates, affected customer numbers, or CVE IDs were mentioned in the report. The incident involved unauthorized access to sensitive data, but the full scope of the impact remains unclear. The company has not provided further specifics on the type of customer data exposed or mitigation steps taken.