New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Vercel get hacked
Vercel say : We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin . and 
hacker
some ppl say they contact hacker via telegram to stop 
Comments
okay lmao
can anyone send me 2 million usd too?
I was just writing a post about it, so will add it here as comment.
Earlier today Vercel confirmed an unauthorized access to their internal systems:
It's highly advised to rotate all your tokens used in environment variables on Vercel now.
The shinyhunters group took credit for the breach claiming they got access to Vercel's internal database and management systems. As proof they published 580 data records of Vercel employee details on BF. Allegedly, the threat actor demanded ransom of $2M from Vercel via Telegram.
After investigation, Vercel discovered the entry vector was a third-party AI tool with compromised Google Workspace OAuth app.
https://www.bleepingcomputer.com/news/security/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/
https://vercel.com/kb/bulletin/vercel-april-2026-security-incident
https://nitter.net/vercel/status/2045938260124266947
very big Clown here
ot:
@oloke thank you for linking to nitter instead of x.
On a sunday evening I now spotted some sanity at work to save the weekend.
yes if you agree to stop being gay
Fake Shinyhunters group
If you aren't able to change the title anymore, may a mod ( @angstrom ) do this please.
"vercal" -> "Vercel"
my poor English
Crazy that their announcements for this are mainly through X and the post is in the knowledge base, rather than the blog/news.
"We have notified law enforcement"
Changed as requested
For a moment, I thought that this was about @Verasel , but happily not!
the difference between Vercel and @Verasel is almost as big as between @angstrom and @armnotstrong but they're both easily confusable
What is the benefit of services like Vercel? I never really look but from what I gather it's basically an AI web builder and they host it on AWS/Google cloud for you or something? I only ever see about them from Reddit threads where people get DDoS'd and they end up with a huge Vercel bill lol. Edit: Or maybe I'm thinking about something with a similar name???
I thought it was a scam Vercel clone, so there's that
They are the developers of NextJS and host their infra on AWS. It's basically a AWS wrapper to easily deploy and manage fullstack JavaScript applications. It's like Dokploy / Coolify, but managed and was there before them.
As they are the developer of NextJS, they offer quick a good integration and support features like PPR etc., which took a little longer for OpenNextJS and equivalents to support on other platforms.
Not to mention @angrystorm
sometimes @oloke and @olokex confuses me
i think the extra x means sex here
@jbiloh what are we thinking about this? is this kinda impersonation allowed?
relax, that's @oloke's femboy alt