[vercel]

August 8, 2026

• Amazon, Cursor, Microsoft, OpenAI, and Vercel launched Agent Plugins, an open standard defining a single package format for AI agent extensions; v1.0.0 uses a plugin.json manifest and supports both agent skills and MCP servers. The Decoder (discussion) · Industry & Policy

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

August 7, 2026

• AWS, Google, and Vercel patched agent-infrastructure flaws that let untrusted or forged instructions reach an agent's tools with no check that a model turn authorized them — in several paths the model never ran at all, so system prompts and content filters never fired. The Hacker News · AI & Model Security

in Meta Becomes the Fourth Lab to Admit Its AI Hacked a Stranger

July 19, 2026

• 251 Vercel personal access tokens allegedly leaked on an underground forum, with sample vcp_-prefixed tokens and a download link posted; if valid and live they'd grant access to deployments, serverless functions and project configuration (DailyDarkWeb). · Cloud, Identity & Supply Chain

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation