Vercel

Chinese companies are releasing open-weight AI models that offer cost-effective alternatives to expensive U.S. models, benefiting American software companies by reducing reliance on premium providers and improving profit margins. The availability of these models has led to a rebound in enterprise software stocks, with companies like Adobe and HubSpot seeing significant gains.

Yang Zhilin, founder of Moonshot AI, is celebrated as a 'millennial genius' on Chinese social media for his Kimi K3 AI model, which disrupted US tech stocks and caused a surge in subscriptions. Moonshot AI paused new subscriptions due to high demand, and Weibo users praised his open-source model for challenging Silicon Valley's AI dominance.

Chinese startup Moonshot AI unveiled Kimi K3, an open-weight AI model with 2.8 trillion parameters that outperforms some US models in coding benchmarks and offers lower pricing. The model's release intensifies global competition in AI and highlights China's open AI strategy challenging US tech companies.

Boris Cherny, creator of Claude Code, argues companies should measure AI success by human hours saved rather than token usage. He outlines a framework for tracking AI returns in enterprise workflows and highlights the shift from token-centric metrics as businesses reassess AI costs. Executives from Coinbase, Vercel, JPMorgan, and OpenAI have also discussed strategies for optimizing AI spending and value.

Anthropic officials advise companies against cutting AI usage amid cost concerns, emphasizing efficient strategies and innovation. They highlight the shift from token-focused hype to ROI-driven approaches and suggest exploring cost-effective methods like model routing within the Claude ecosystem.

Vendelux, a B2B events platform co-founded by Stefan Deeran and Alex Reynolds, raised $50 million in a Series B round led by Tribeca Venture Partners. The company uses AI and event data to help marketers optimize event strategies and has 250 customers including Ramp and ElevenLabs.

Vercel CEO Guillermo Rauch stated that companies are no longer relying on a single AI lab for all needs, instead using different labs for various parts of their AI stack. He highlighted the adoption of models from OpenAI, Anthropic, Gemini, DeepSeek, and GLM-5.2, emphasizing cost efficiency and performance.

GLM-5.2, a new open-source Chinese AI model designed for long coding tasks, has generated significant buzz in Silicon Valley. The model operates on a 1 million token context window and has drawn praise from tech leaders like Vercel CEO Guillermo Rauch and former Meta executive Matt Velloso, who called it a potential game-changer.

Vercel admitted to mishandling an FBI search warrant in 2025 by failing to locate user data in a deletion queue, leading to a civil contempt case. The company avoided penalties by agreeing to a stipulated dismissal, admitting wrongdoing, and updating its legal processes to ensure future compliance.

Startups like OpenRouter and Concentrate AI are gaining traction by helping companies manage AI model costs through routing tools, as cheaper models like DeepSeek's V4 emerge. These companies face competition from Big Tech firms like AWS, Microsoft, and Google Cloud.

Amazon has re-engineered its serverless OpenSearch service to separate storage and compute, targeting agentic AI workloads with faster auto-scaling and cost savings. The service integrates with Vercel and AWS's Kiro IDE, while Elastic's 2024 serverless search offering is noted as a competitor.

InsForge is an open-source platform designed for coding agents to deploy, operate, and debug end-to-end, providing features like frontend hosting, backend servers, and database. The platform aims to simplify the process of managing backend infrastructure for coding agents. InsForge is available on GitHub under Apache 2.0 license.

SimplePDF Copilot is an AI-powered PDF editor that enables client-side operations like form filling, field detection, and page deletion while maintaining privacy by keeping data in the browser. Built on a 7-year-old privacy-focused platform used by 200k+ monthly users, it leverages open-source tools like CommonForms and supports local or cloud LLM integration.

The article discusses Vercel's upselling strategies, revealing how the company leverages its hosting platform to promote premium services. It highlights tactics like tiered pricing and feature limitations to drive conversions.

The Vercel breach highlights risks from third-party OAuth integrations, showing how a compromised app can expose customer environments. Push warns that OAuth sprawl and Shadow AI practices amplify security vulnerabilities.

A tool called beehiiv-reader.vercel.app allows users to read Beehiiv sites without encountering paywalls or distractions. The article has 8 points on Hacker News but no comments.

Vercel confirmed a security breach impacting more customers than initially reported, with evidence of malware distribution targeting Vercel accounts and third-party systems. The attack originated from Context.ai, a third-party AI tool, and involved the theft of environment variables and API misuse. Vercel stated no software tampering was found, but downstream risks persist.

The Vercel incident prompted a reevaluation of hosting and secrets management strategies. The user is considering switching to Hostinger Node.js for better control and cost reduction, viewing the incident as a potential opportunity for improvement.

Vercel discovered evidence of a second compromise of customer accounts after expanding its investigation following a data breach in early April. The breach involved the theft of customer data prior to the recent security incident.

Vercel discovered additional compromised customer accounts linked to a security breach associated with Context.ai. The company expanded its investigation using new compromise indicators and reviewed network activity to identify the issue.

Vercel experienced a security breach in April 2026 due to an OAuth attack, exposing risks in platform environment variables. The incident was linked to a Roblox cheat and an AI tool, causing significant disruption.

Vercel, a cloud platform, acknowledged a security breach caused by a third-party AI tool, resulting in the compromise of credentials for a limited subset of customers. The company issued a statement warning affected users about the incident.

Vercel's CEO suspects AI-assisted intruders exploited OAuth abuse and a stolen employee account to breach the company, with stolen data being sold for $2 million. The attackers demonstrated a 'surprising velocity' and deep infrastructure knowledge.

A Roblox cheat and an AI tool caused Vercel's platform to crash, leading to widespread outages. The incident was reported by WebMatrices and discussed on Hacker News, where it received 27 points and one comment.

A Vercel employee's access to an AI tool led to a data breach involving stolen OAuth tokens. The breach highlights the growing risk of OAuth tokens as a new attack vector and method for lateral movement in cyberattacks.

Vercel experienced a security breach where attackers used malware disguised as Roblox cheats to compromise an employee's device at Context.ai, leading to stolen credentials and access to Vercel environments. The attack exploited interconnected systems and overly privileged permissions, with threat group ShinyHunters claiming responsibility and attempting to sell stolen data.

Vercel reported a data breach where customer data was stolen after hackers exploited an earlier hack at Context AI to gain access to a Vercel employee's account.

The article highlights evolving cybersecurity threats, including the exploitation of third-party tools, trusted download paths swapped for malware, and browser extensions used to exfiltrate data. It also notes the abuse of QEMU, new Android RATs, and the broader trend of attackers leveraging trust in update channels and legitimate software to bypass defenses.

DeFi's future is under scrutiny following a $292M exploit of KelpDAO, causing a $13B decline in Total Value Locked (TVL). Vercel's CEO attributed the attack to 'highly sophisticated' actors leveraging AI.

Vercel's cloud platform experienced a security breach where customer credentials were compromised, attributed to 'highly sophisticated' AI-powered hackers. The incident particularly affected crypto frontends hosting their UI on the platform.

Vercel, the company behind the Next.js framework, reported a data leak compromising customer credentials, which it attributed to Context.ai. Context.ai claims the incident resulted from an 'agentic OAuth tangle,' a technical issue involving authentication protocols.

Vercel confirmed a 'limited' hack of user information after a member of a hacking forum listed the company's data for sale at $2 million. The breach highlights potential vulnerabilities in cloud hosting security.

Vercel reported unauthorized access to internal systems via a compromised third-party AI tool's Google Workspace OAuth app. While services remain operational and no sensitive data was confirmed accessed, Solana DeFi teams are urged to rotate secrets and audit OAuth integrations for security.

Vercel disclosed a security breach linked to the compromise of third-party AI tool Context.ai, allowing unauthorized access to internal systems via an employee's Google Workspace account. The incident exposed limited customer credentials.

A security breach at Vercel has prompted cryptocurrency developers to urgently secure their API keys, raising concerns about potential data exposure and misuse.

Vercel, a key Web3 hosting platform, confirmed a security breach where a hacker allegedly demanded $2 million in ransom. The incident raises concerns about exposed secrets from non-sensitive environment variables used by crypto and Web3 projects.

Vercel, a major web app hosting platform, confirmed a security breach where hackers stole employee data and are attempting to sell it. The attack exploited a compromised third-party AI tool, with ShinyHunters, the group behind the Rockstar Games hack, claiming involvement. Vercel stated the incident affected a limited subset of customers.

Eitherway Bot is a Telegram AI bot developed by EitherwayAI, enabling users to create Web2/Web3 monetizable products like e-commerce platforms and trading terminals directly from Telegram. It is fully deployable on platforms like GitHub, Vercel, and Netlify with one-click deployment, leveraging Solana's blockchain.

Vercel confirmed that its internal systems were compromised in a security breach, raising concerns about potential data exposure. The company has not disclosed specific details about the breach's scope or the data affected. The incident is under investigation.

Vercel disclosed a security incident in April 2026, though details remain unspecified. The article is listed on Vercel's knowledge base with no comments or detailed analysis provided.