A security breach at Vercel, a web infrastructure provider, has been linked to a hack of Context AI, a third-party artificial intelligence tool used by one of the company's employees. The breach allowed unauthorized access to certain internal Vercel systems, with the attacker leveraging the compromised Context AI tool to take control of the employee's Google Workspace account. This incident highlights the risks associated with third-party vendors and the evolving tactics used by threat actors. The fact that the breach involved a Google account signals a potential shift in attack methods, which could have downstream effects on regulatory and supply-chain security1. This matters to practitioners because it underscores the importance of scrutinizing third-party vendors and implementing robust security measures to prevent similar breaches, particularly in light of the potential for regulatory and supply-chain repercussions.