The $2M Vercel Supply Chain Attack: Why OAuth and MFA Failed

We’ve been tracking supply chain attacks for months, but the Vercel breach that dropped on April 19 stopped us cold. It wasn’t a sophisticated hack of their servers, just a stolen OAuth token from an employee’s infected laptop, replayed to…









