vercel

The 22-Month Window: How Vercel's Upstream Analytics Bridge Was Compromised

John Z Black Apr 21, 2026

Incidents & Breaches #supply-chain #oauth #dwell-time #vercel #cloud-security

Vercel recently disclosed a major security incident via Context.ai that began in June 2024. For nearly two years, an invisible door was held open into the core of their cloud identity. It is a masterclass in the hidden risks of 'harmless' SaaS analytics.