Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…
Vercel patched authorization bypass vulnerabilities in the Codex and OpenCode harness packages, removing the process-path fallback and requiring exact one-time authorizations for…
The Vercel AI SDK harness packages for Codex and OpenCode had authorization bypass vulnerabilities, fixed in versions 1.0.29 and 1.0.28 respectively.
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
Vercel is a cloud platform for static sites and serverless functions. The SleeperGem malware checks for Vercel environment variables to avoid running…