
The Vercel Breach: OAuth Vulnerabilities and the Risk of Insecure Secret Defaults
368
A long-term breach at Vercel exploited a third-party OAuth trust and insecure default settings to expose customer secrets at a platform scale.
Security vulnerabilities, best practices, and attack vectors related to the OAuth authorization framework, including token misuse, insecure defaults, and third-party trust exploitation.

A long-term breach at Vercel exploited a third-party OAuth trust and insecure default settings to expose customer secrets at a platform scale.