Vercel
In 11 briefs, most recently 5 November 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Zyxel GS1900 zero-day hit nearly 1,000 switches, OpenSSH 'sshole' flaw on musl systems, and Chainalysis confirms all users' tokens exposed.
- Manchester Airports Group breach, ShinyHunters leaking 13M Carhartt accounts, and critical unauthenticated RCE flaws patched in Next.js.
- Unlimited Technology breach hits 3.8M people, SharePoint flaws exploited in Swiss government attacks, and TeamPCP linked to Redis and supply chain campaigns.
- Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
- The TeamPCP SAP npm supply chain attack, Checkmarx GitHub data theft, and a five-year dormant WordPress plugin backdoor affecting 70,000+ sites.
- The TeamPCP supply chain attacks on Checkmarx and Bitwarden, ShinyHunters breaches of ADT and Medtronic, and new Windows privilege escalation flaws.
- Bitwarden and Checkmarx supply chain attacks, Vercel breach, and actively exploited Microsoft Defender BlueHammer zero-day.
- KelpDAO's $290M crypto theft tied to Lazarus Group, Vercel breach via compromised OAuth tokens, and a Scattered Spider leader's guilty plea.
- Vercel breach tied to Context AI, Apple-notification phishing via legitimate Apple emails, and NIST dropping severity scores for low-priority CVEs.
- Co-op's £80M cyberattack loss, Shai-Hulud npm worm infecting 500+ packages, and Cisco zero-days under CISA emergency directive.
- Qantas and Johnson Controls breach notices, a Chrome zero-day (CVE-2025-6554) under active exploitation, and Silver Fox's Gh0stRAT campaign against Taiwanese …