A breach at cloud platform provider Vercel has been traced to a compromised third-party artificial intelligence tool, Context.ai, which was used by a Vercel employee. The attacker initially gained access to the AI tool, allowing them to steal credentials and OAuth tokens tied to multiple services and customers, ultimately leading to the theft of customer data. This incident highlights the potential risks associated with the use of third-party tools and the importance of securing credentials and tokens. The breach is notable for its use of an AI tool as an entry point, demonstrating the evolving nature of cyber attacks1. As a result, cloud platform providers and their customers must be vigilant in monitoring and securing their systems, particularly when using third-party tools. This incident may have significant implications for the security of cloud-based services, so practitioners should be prepared to reassess their own security protocols to prevent similar breaches.