Vercel CEO: Vercel security investigation shows that attackers obtained account keys by distributing malware, with the impact exceeding initial assessments

Odaily Planet Daily News reports that Vercel CEO Guillermo Rauch posted on the X platform stating that the team has conducted an in-depth analysis of recent security incidents. The investigation shows that threat actors distributed malware on computers to search for Vercel accounts and other service provider keys. Once the keys are obtained, attackers perform large-scale operations via API, focusing on enumerating non-sensitive environment variables. Vercel has expanded collaborations with industry partners such as Microsoft, AWS, and Wiz, and has notified other suspected victims. Currently, Vercel has released multiple product enhancement features, and updates on the ongoing investigation will be provided through security announcements.