JaceX @jacegambo - Twitter Profile

Keep this in mind the next time you use Al: your brain is inherently smarter. Al should augment your brain, not replace it. Remember to use Al today strictly as an efficiency tool-not as a second brain you run to just because you're too lazy to use the real one. Cheers!

0

7

JaceX @JaceGambo

about 2 months ago

@cyb3rshi3ld Hi

0

3

JaceX @JaceGambo

about 2 months ago · Gombe

Consistency isn't a straight line. it’s about shortening the time between getting distracted and getting back to work. #My3MTT #3MTTWeeklyReflection #3MTTNextGen #PersonalDevelopment #airtelfoundation ...

JaceGambo's tweet photo. Consistency isn't a straight line. it’s about shortening the time between getting distracted and getting back to work.

#My3MTT #3MTTWeeklyReflection #3MTTNextGen #PersonalDevelopment #airtelfoundation
... https://t.co/DB1H4KcJDI

0

1

0

8

JaceGambo retweeted

Victor Akinode

@VictorAkinode

2 months ago

Vercel got hacked yesterday and honestly, the way it happened should make every developer nervous. It did not start with Vercel. It started with a single employee who signed up for a small AI tool called https://t.co/RoJrnZXkXh using their work email and clicked allow on a Google Workspace permission request. That one click eventually handed attackers the keys to Vercel’s internal systems. https://t.co/RoJrnZXkXh got hit first. The attacker grabbed an OAuth token, used it to get into the employee’s Google Workspace, and from there quietly moved through Vercel’s internal environments picking up API keys, environment variables, NPM tokens, and GitHub tokens. A threat actor claiming to be ShinyHunters is now reportedly selling that data on a hacking forum for $2 million. This is the part that should hit home: Vercel is not a small company. They run the infrastructure that millions of developers deploy on. They steward Next.js, which gets downloaded 6 million times a week. And they got compromised not because of a zero-day or a sophisticated attack. They got compromised because one employee gave a third-party AI tool too much access. That third-party tool is now part of your attack surface too whether you think about it that way or not. If you use Vercel, rotate your credentials now. Audit what has access to your Google Workspace. Mark your environment variables as sensitive. And the next time an AI tool asks for broad permissions, think twice before clicking allow. Repost for others to see.

VictorAkinode's tweet photo. Vercel got hacked yesterday and honestly, the way it happened should make every developer nervous.

It did not start with Vercel. It started with a single employee who signed up for a small AI tool called https://t.co/RoJrnZXkXh using their work email and clicked allow on a Google Workspace permission request. That one click eventually handed attackers the keys to Vercel’s internal systems.

https://t.co/RoJrnZXkXh got hit first. The attacker grabbed an OAuth token, used it to get into the employee’s Google Workspace, and from there quietly moved through Vercel’s internal environments picking up API keys, environment variables, NPM tokens, and GitHub tokens.

A threat actor claiming to be ShinyHunters is now reportedly selling that data on a hacking forum for $2 million.

This is the part that should hit home: Vercel is not a small company.

They run the infrastructure that millions of developers deploy on.

They steward Next.js, which gets downloaded 6 million times a week.

And they got compromised not because of a zero-day or a sophisticated attack.

They got compromised because one employee gave a third-party AI tool too much access.

That third-party tool is now part of your attack surface too whether you think about it that way or not.

If you use Vercel, rotate your credentials now. Audit what has access to your Google Workspace. Mark your environment variables as sensitive.

And the next time an AI tool asks for broad permissions, think twice before clicking allow.

Repost for others to see.

3

6

4

1

308

JaceX @JaceGambo

3 months ago

I'm attending Google Developer Groups GDG on Campus Ahmadu Bello University - Zaria, Nigeria w/ Build with AI 2026: From Zero to AI Builder on Mar 28.

0

10