Vercel Breach: Roblox Cheat Unlocks $2M AI OAuth Chain

A Vercel breach exposed plaintext environment variables via an OAuth supply chain attack originating from a Roblox cheat, with stolen data listed for $2M on BreachForums.

The Vercel breach disclosed on April 19, 2026 started when a Context.ai employee downloaded Roblox auto-farm cheat scripts in February 2026 and got infected with Lumma Stealer. Context.ai cut AWS access in March, but an OAuth token had already escaped the vendor’s perimeter and reached a Vercel employee’s Google Workspace through an “Allow All” AI Office Suite consent. The intruder then enumerated and decrypted Vercel environment variables that customers had not marked as sensitive — exposing API keys, database credentials, and signing secrets — and a BreachForums post priced the data at $2 million days later. Next.js, Turbopack, and open-source npm packages were validated as untampered by a joint review with Google Mandiant, GitHub, Microsoft, npm, and Socket. Read more »

$12B Mira Murati Inks Google Cloud GB300 Multi-Billion Deal

Mira Murati's Thinking Machines Lab signs a multi-billion Google Cloud GB300 deal featuring A4X Max 4-GPU VMs, anchoring a $12B company valuation.

Mira Murati’s $12B AI startup Thinking Machines Lab signed a single-digit billion dollar AI infrastructure deal with Google Cloud on April 22, 2026, at Google Cloud Next 2026. The agreement bundles Nvidia’s latest GB300 chips inside A4X Max virtual machines with Kubernetes Engine, Spanner, and storage services. It is the lab’s first cloud provider contract and operates as a bridge to the separate 1-gigawatt NVIDIA Vera Rubin partnership slated for early 2027. Read more »

Rockstar Games Breach: SaaS Token Theft Hit 12 Companies

Rockstar Games breach timeline showing ShinyHunters using stolen SaaS tokens to pivot through Snowflake and compromise 12 companies including Cisco, Telus, and the EU Commission.

“Pay or leak.” Three words. That was the entirety of the ultimatum ShinyHunters posted alongside its claim of having breached Rockstar Games’ Snowflake data warehouse environment. The hacking group made the declaration on April 11, setting an April 14 deadline for ransom payment — or face a full public dump of stolen corporate data. Read more »

WordPress Supply Chain Attack Hits 900K Sites in 6 Hours

WordPress supply chain attack on Smart Slider 3 Pro pushed a 6-stage backdoor to up to 900K sites within 6 hours on April 7, with a full recovery guide provided.

Six hours. That is how long it took for the most sophisticated WordPress supply chain attack on record to unfold and get shut down. On April 7, hackers compromised the update infrastructure of Smart Slider 3 Pro — a popular slider plugin with 800,000 to 900,000 active installations — and pushed a weaponized build through the official distribution channel. Read more »