Vercel has been breached

Vercel has been breached by an attacker who discussed an alleged ransom demand of $2 million with Vercel on Telegram.

The attacker claims to be a part of ShinyHunters, but ShinyHunters has denied any involvement.

Some internal systems and env vars (including NPM and GitHub tokens) not marked as "sensitive" (not encrypted) were accessed. The attacker also shared 580 data records of Vercel employees, and a screenshot of an internal Vercel Enterprise dashboard, but the authenticity isn't confirmed.

Next.js, Turbopack, and other open-source projects remain safe.

How it happened:
An employee logged into an AI tool Context.ai with Google OAuth, which enabled the attacker to access the employee's Google Workspace account.

🔗 Vercel | BleepingComputer
🧑‍💻 @agamtechtricks

Earthset captured from iPhone in Space
#ShotOniPhone

Like watching sunset at the beach, Artemis II astronaut - Reid Wiseman, captured the video of the Earthset at 8x zoom from his iPhone 17 Pro Max in space.

I could barely see the Moon through the docking hatch window but the iPhone was the perfect size to catch the view…this is uncropped, uncut with 8x zoom which is quite comparable to the view of the human eye. Enjoy.

Follow @TechLeaksZone

BREAKING: Apple CEO Tim Cook Steps down and John Ternus will take over as the CEO

Apple announced that Tim Cook will become Executive Chairman of Apple’s board of directors and John Ternus, senior VP of Hardware Engineering, will become Apple’s next chief executive officer effective on September 1, 2026.

Tim Cook joined Apple in 1998. He became CEO in 2011. Ternus joined Apple’s product design team in 2001 and became a VP of Hardware Engineering in 2013. He joined the executive team in 2021 as senior vice president of Hardware Engineering.

Apple executive Johny Srouji will become chief hardware officer. Srouji, who most recently served as senior vice president of Hardware Technologies, will assume an expanded role leading Hardware Engineering, which John Ternus most recently oversaw, as well as the hardware technologies organization.

Arthur Levinson, who has been Apple’s non-executive chairman for the past 15 years, will become its lead independent director on September 1, 2026.

Follow @TechLeaksZone

Speedtest x Microsoft
Ookla Articles

Speedtest by Ookla will now be the integrated network performance testing platform across Bing and Windows.

For Windows users, this means a network speed test is accessible directly from the taskbar. Users can soon simply right-click their network icon in the system tray or open their Wi-Fi and Cellular Quick Settings to launch a diagnostic check without needing to manually open a browser or run a secondary tool.

Follow @TechLeaksZone

A Qualcomm Exploit to unlock bootloader

This is a Proof of Concept (PoC) for a Qualcomm ABL bootloader unlock via Keymaster TA unauthenticated.

Use it at your own risk

https://github.com/atlas4381/qualcomm_avb_exploit_poc

Google only bumps ARB when things like this may occur

Xiaomi users dreams may finally come true.

We're so back!

https://fixupx.com/CoyoteACMEMovie/status/2046935891068006804?s=20

Meanwhile in Bug Bounty:

AI slop bug reports overflowing vendors. Vendors can't handle the slop. Slop code, slop exploits, and slop write-ups result in vendor exiting program.

AI slop is choking Bug Bounty

The Bitwarden security team identified and contained a malicious package briefly distributed through the npm delivery path for the Bitwarden CLI v2026.4.0 in connection with the broader Checkmarx supply chain incident. No user vault data or production systems were compromised or at-risk.

The issue affected the npm distribution mechanism for the CLI during that limited window, not the integrity of the legitimate Bitwarden CLI codebase or stored vault data.

Read more:
https://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127/4

Man who allegedly leaked new Avatar: The Last Airbender film arrested for illegal server access

A 26 year-old from Singapore, who allegedly leaked the unreleased film The Legend Of Aang: The Last Airbender, has been arrested. Various electronic devices were seized, and a copy of the film was recovered from his devices.

According to Singapore Police Force, the man had gained remote access to the media-content server and downloaded the film. He is currently being investigated for unauthorised access to computer material, which carries a maximum jail term of seven years, a fine not exceeding $50,000, or both.

🔗 The Straits Times
🧑‍💻 @agamtechtricks

Firefox Has Quietly Integrated Brave's Adblock Engine

Firefox 149 has quietly implemented adblock-rust, Brave's open source Rust-based ad and tracker blocking engine. This is disabled by default and no user interface and filters are included.

To enable it:

privacy.trackingprotection.content.protection.enabled = true

privacy.trackingprotection.content.protection.test_list_urls = https://easylist.to/easylist/easylist.txt|https://easylist.to/easylist/easyprivacy.txt

🔗 It's FOSS
🧑‍💻 @agamtechtricks