Vercel experienced a security breach after attackers compromised a Vercel employee’s access via a third-party AI tool sign-in. The incident started from a compromise of Context.ai’s OAuth app, identified as 110671459871-30f1spbu0hptbs60cb4vsmv79i7bbvqj.apps.googleusercontent.com. Vercel told affected customers to rotate credentials and environment variables, review activity and deployments, enable protections for sensitive environment variables, and Vercel added extra monitoring and defenses while investigations by security firms continued.
Hugging Face said a hack last week compromised its internal datasets and service credentials after a malicious dataset exploited a security vulnerability on its servers. It disclosed the breach on Friday. It revoked and rotated the accessed credentials, fixed the vulnerability, and urged users to rotate any stored keys and review account activity.
Rool launched a private AI workspace that brings files, ideas, and AI into a single environment running on the user’s own machine in the cloud. Rool says its data is stored in Finland under EU law. It positions itself as not selling data, showing ads, or using content to train AI, with users able to try it for free.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
