buc.ci

Search results for tag #vercel

Daily CyberSecurity » 🌐 2026-07-23
@DailyCyberSecurity@infosec.exchange

Three Next.js vulnerabilities (CVE-2026-64645, CVE-2026-64649, CVE-2026-64642) enable Server-Side Request Forgery and middleware bypass. Patch now.

#Nextjs #SSRF #CVE202664645 #WebSecurity #Vercel

http://securityonline.info/nextjs-vulnerabilities-ssrf/?utm_source=mastodon&utm_medium=jetpack_social

AodeRelay boosted

Hackread.com » 🌐 2026-05-11
@Hackread@mstdn.social

📢⚠️ Hackers are abusing Vercel GenAI to mass-create convincing phishing sites that mimic major brands, including Microsoft, Adidas, and Nike, making scams harder to detect.

Read: https://hackread.com/hackers-exploit-vercel-genai-phishing-sites/

#CyberSecurity #Phishing #Vercel #GenAI #Microsoft #Scam #AI

3 ★ 2 ↺

#tech boosted

Anthony » 🌐 2026-04-21 / 2026-04-21
@abucci@buc.ci

One of the things I'm finding stunning about the Vercel breach is how many people are saying "I had $VERY_LARGE_NUMBER of OAuth apps authorized to my $VERY_IMPORTANT_ACCOUNT and had to go through them all". I have like 2 OAuth apps authorized on any account that matters to me, and I review them fairly regularly and remove ones I don't use or don't remember. I also never accept "allow all" for any app. Apparently I'm weird in this way? I just feel like not doing this is akin to using "password" for all your passwords.

#tech #dev #security #cybersecurity #InfoSec #Vercel #breach #OAuth #AI