Did ShinyHunters Compromise Vercel? Every CISO's Cloud Security Visibility Problem

About this episode

The episode discusses the Vercel incident and the implications of SaaS visibility gaps in cloud security.

89% of organizations that suffered a SaaS breach last year believed they had appropriate visibility. They had the logs — what they lacked was detection on what mattered. The Vercel incident shows exactly how costly that gap can be. Join hosts Brandon and John as they discuss: How a third-party OAuth chain may have exposed Vercel's internal dataWhy SaaS visibility gaps leave organizations exposedThe controls that can break the attackResources: https://linktr.ee/ReliaQuestShadowTalk John ...

Topics covered

• SaaS breach
• cloud security
• visibility gaps
• third-party OAuth

Keywords

• ShinyHunters
• Vercel
• cloud security visibility
• data exposure

Mentioned in this episode

Products: Vercel

More episodes of ShadowTalk: Powered by ReliaQuest

• China-Linked Cyber Espionage: How OP-512 Exploited Legacy IIS Servers and Evaded Detection · June 10, 2026 · 23 min
• SonicWall, MFA Bypass, IABs: Why Patched Devices Are Still Handing Attackers Initial Access · June 3, 2026 · 21 min
• Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook · May 27, 2026 · 29 min
• SQLite, Mistral, OpenAI: How AI Attacks Are Reshaping the Attack Surface · May 20, 2026 · 20 min
• Canvas, Trellix, Mini Shai-Hulud: How Defenders Respond When Supply Chain Attacks Become Weekly · May 14, 2026 · 32 min
• Akira, ShinyHunters, and The Gentlemen: Extortion Lessons From Early 2026 · May 6, 2026 · 35 min