OAuth App Compromise in Vercel’s April 19 Incident: Verify Scopes, Rotate Secrets, and Build an Audit-Ready Playbook
Vercel’s April 19 disclosure shows how OAuth tooling can turn into account-level access. Operators should verify app scopes, rotate environment variables, and standardize an audit-ready response.