Vercel Says Internal Systems Hit in Breach
The incident came to light on Sunday and the company says it has brought in an incident response provider to investigate the intrusion. Details of the intrusion are scant at this point.
All topics
The incident came to light on Sunday and the company says it has brought in an incident response provider to investigate the intrusion. Details of the intrusion are scant at this point.
The campaign targets high-value individuals and organizations in the cryptocurrency, digital assets, and finance sectors.
During the largest DeFi hack of 2026, it only took attackers 12 minutes to drain millions in user assets - but the build up to the attack took six months of meticulously planned social engineering.
Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer’s account, the window of exposure for the malicious packages, the behavior of the RAT that’s installed on victims’ machines, and what the downstream effects may be.
Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.
The new sanctions list includes two China-based technology companies, two of their co-founders, and an Iranian firm, all implicated in a range of attacks from corporate espionage and critical infrastructure disruption to disinformation campaigns.