Vercel’s security breach started with malware disguised as Roblox cheats

Vercel experienced a security breach where attackers used malware disguised as Roblox cheats to compromise an employee's device at Context.ai, leading to stolen credentials and access to Vercel environments. The attack exploited interconnected systems and overly privileged permissions, with threat group ShinyHunters claiming responsibility and attempting to sell stolen data.