Inside Vercel's April 2026 Breach — A 3-Step OAuth Supply-Chain Chain (and Why One Checkbox Saved Some Secrets)

On April 19, 2026 (updated April 20), Vercel published a Security Bulletin confirming unauthorized access to certain internal systems. The headline is that Vercel got breached. The actual story is how — a three-step OAuth chain that started at a thir...