About this episode

The episode discusses the Vercel breach and the implications of modern security vulnerabilities in the age of AI and SaaS.

In this episode of BHIS Presents: AI Security Ops, the team breaks down the Vercel breach — a real-world incident that shows just how fragile modern security has become in the age of AI integrations and SaaS sprawl. What started as a simple Roblox cheat script downloaded on a work laptop quickly escalated into a multi-hop compromise involving OAuth permissions, an AI productivity tool, and access into Vercel’s internal systems. This wasn’t a zero-day or advanced nation-state exploit. It was a chain of everyday decisions: installing software, clicking “Allow,” and trusting third-party integrations. The result? Allegedly $2M worth of data listed for sale, including API keys, internal data, and employee records — all from a breach path that most organizations aren’t even monitoring. We dig into: • What Vercel is and why it’s such a high-value target • How environment variables become the “keys to the kingdom” • The full attack chain: Roblox malware → Context.ai → Vercel • What infostealers like Lumma actually do (and how cheap they are) • How OAuth permissions become persistent backdoors • Why AI productivity tools introduce hidden risk • The rise of “shadow AI” inside organizations…

Explore listener stats, chart rankings, contacts and more on the AI Security Ops podcast page.