Context.ai OAuth Token Compromise

Published

2026-04-20 18:20

Collected

2026-08-29 00:59

---
id: 6862
title: "Context.ai OAuth Token Compromise"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/contextai-oauth-token-compromise"
published_at: "2026-04-20T18:20:06Z"
tags: ["ai-security", "supply-chain", "incident-response", "oauth", "saas-security", "vercel", "context-ai"]
phying_url: "https://phying.com/item/6862"
lang: en
---

# Context.ai OAuth Token Compromise

## Summary

Wiz analyzes the Vercel incident: stolen Context.ai OAuth tokens, a broad 'Allow All' grant, and a suspected infostealer infection enabled a double supply chain attack via trusted SaaS tools.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-04-20T18:20:06Z
- **Original:** https://www.wiz.io/blog/contextai-oauth-token-compromise
- **Phying News:** https://phying.com/item/6862