Vercel’s April 2026 security bulletin<\/a> says the incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee. The attacker used that access to take over the employee’s Google Workspace account, then pivoted into Vercel systems. The important part is not that the tool had AI in the name. It is that the tool had access.<\/p>\nModern AI tools connect to email, code, tickets, documents, browsers, terminals, cloud dashboards, and internal systems. That access is exactly why they are useful, and exactly why they need to be treated seriously. If a tool can read secrets, query systems, trigger workflows, or bridge between accounts, it is part of the security boundary whether the team admits it or not.<\/p>\n
The answer is not panic. It is normal security discipline: MFA, passkeys, restricted OAuth access, secret rotation when exposure is possible, activity log review, least privilege, and a clear understanding of which tools can access which systems. AI tools are now part of the development supply chain, so they should get the same scrutiny as CI providers, deployment tools, package registries, browser extensions, and SaaS integrations.<\/p>\n","protected":false},"excerpt":{"rendered":"
AI tools are now part of the software supply chain. That means they need the same security scrutiny as any other tool with access to systems and secrets.<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[26,25],"tags":[130,129,132,131],"class_list":["post-1251","post","type-post","status-publish","format-standard","hentry","category-ai","category-software-engineer","tag-ai-tools","tag-security","tag-supply-chain","tag-vercel"],"yoast_head":"\n
The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one\" \/>\n<meta property=\"og:description\" content=\"AI tools are now part of the software supply chain. That means they need the same security scrutiny as any other tool with access to systems and secrets.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"wade.one\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-03T17:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@wadewomersley\" \/>\n<meta name=\"twitter:site\" content=\"@wadewomersley\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk\",\"datePublished\":\"2026-05-03T17:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/\"},\"wordCount\":247,\"publisher\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/#\\\/schema\\\/person\\\/8b4739f8f8bb2cff5d792d4b8779fcc3\"},\"image\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/01-lock-chain.jpg\",\"keywords\":[\"ai-tools\",\"security\",\"supply-chain\",\"vercel\"],\"articleSection\":[\"AI\",\"Software Engineer\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/\",\"url\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/\",\"name\":\"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/01-lock-chain.jpg\",\"datePublished\":\"2026-05-03T17:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/01-lock-chain.jpg\",\"contentUrl\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/01-lock-chain.jpg\",\"width\":960,\"height\":1440,\"caption\":\"A padlock on a chain\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/2026\\\/05\\\/03\\\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wade.one\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/wade.one\\\/blog\\\/\",\"name\":\"wade.one\",\"description\":\"wade womersley - york based software engineer\",\"publisher\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/#\\\/schema\\\/person\\\/8b4739f8f8bb2cff5d792d4b8779fcc3\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/wade.one\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/#\\\/schema\\\/person\\\/8b4739f8f8bb2cff5d792d4b8779fcc3\",\"name\":\"Wade Womersley\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/200px.png\",\"url\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/200px.png\",\"contentUrl\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/200px.png\",\"width\":202,\"height\":200,\"caption\":\"Wade Womersley\"},\"logo\":{\"@id\":\"https:\\\/\\\/wade.one\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/02\\\/200px.png\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/","og_locale":"en_GB","og_type":"article","og_title":"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one","og_description":"AI tools are now part of the software supply chain. That means they need the same security scrutiny as any other tool with access to systems and secrets.","og_url":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/","og_site_name":"wade.one","article_published_time":"2026-05-03T17:00:00+00:00","og_image":[{"url":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_creator":"@wadewomersley","twitter_site":"@wadewomersley","twitter_misc":{"Estimated reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#article","isPartOf":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/"},"author":{"name":"","@id":""},"headline":"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk","datePublished":"2026-05-03T17:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/"},"wordCount":247,"publisher":{"@id":"https:\/\/wade.one\/blog\/#\/schema\/person\/8b4739f8f8bb2cff5d792d4b8779fcc3"},"image":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg","keywords":["ai-tools","security","supply-chain","vercel"],"articleSection":["AI","Software Engineer"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/","url":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/","name":"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk - wade.one","isPartOf":{"@id":"https:\/\/wade.one\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#primaryimage"},"image":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg","datePublished":"2026-05-03T17:00:00+00:00","breadcrumb":{"@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#primaryimage","url":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg","contentUrl":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg","width":960,"height":1440,"caption":"A padlock on a chain"},{"@type":"BreadcrumbList","@id":"https:\/\/wade.one\/blog\/2026\/05\/03\/the-vercel-incident-is-a-reminder-that-ai-tools-are-supply-chain-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wade.one\/blog\/"},{"@type":"ListItem","position":2,"name":"The Vercel Incident Is a Reminder That AI Tools Are Supply Chain Risk"}]},{"@type":"WebSite","@id":"https:\/\/wade.one\/blog\/#website","url":"https:\/\/wade.one\/blog\/","name":"wade.one","description":"wade womersley - york based software engineer","publisher":{"@id":"https:\/\/wade.one\/blog\/#\/schema\/person\/8b4739f8f8bb2cff5d792d4b8779fcc3"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wade.one\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/wade.one\/blog\/#\/schema\/person\/8b4739f8f8bb2cff5d792d4b8779fcc3","name":"Wade Womersley","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2015\/02\/200px.png","url":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2015\/02\/200px.png","contentUrl":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2015\/02\/200px.png","width":202,"height":200,"caption":"Wade Womersley"},"logo":{"@id":"https:\/\/wade.one\/blog\/wp-content\/uploads\/2015\/02\/200px.png"}}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1243,"url":"https:\/\/wade.one\/blog\/2026\/04\/29\/next-js-is-starting-to-treat-ai-agents-as-real-users\/","url_meta":{"origin":1251,"position":0},"title":"Next.js Is Starting to Treat AI Agents as Real Users","author":"","date":"April 29, 2026","format":false,"excerpt":"Next.js is starting to treat AI agents as real users of the framework. That is more important than it first sounds.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1233,"url":"https:\/\/wade.one\/blog\/2026\/04\/24\/ai-coding-agents-are-becoming-normal-developer-infrastructure\/","url_meta":{"origin":1251,"position":1},"title":"AI Coding Agents Are Becoming Normal Developer Infrastructure","author":"","date":"April 24, 2026","format":false,"excerpt":"AI coding agents are moving from novelty demos into normal developer infrastructure. The useful question now is how teams manage them properly.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1247,"url":"https:\/\/wade.one\/blog\/2026\/05\/01\/docker-mcp-shows-why-agent-tools-need-boring-infrastructure\/","url_meta":{"origin":1251,"position":2},"title":"Docker MCP Shows Why Agent Tools Need Boring Infrastructure","author":"","date":"May 1, 2026","format":false,"excerpt":"The more agents use real tools, the more they need boring infrastructure: isolation, versioning, profiles, credentials, and repeatable setup.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1158,"url":"https:\/\/wade.one\/blog\/2026\/03\/26\/why-senior-engineers-still-matter-more-in-the-ai-era\/","url_meta":{"origin":1251,"position":3},"title":"Why Senior Engineers Still Matter More in the AI Era","author":"","date":"March 26, 2026","format":false,"excerpt":"AI can generate code faster, but that only makes direction, judgment, and accountability more important. Senior engineers still matter because the expensive mistakes are rarely typing mistakes.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1155,"url":"https:\/\/wade.one\/blog\/2026\/03\/26\/ai-is-not-a-bubble-denial-is-the-real-problem\/","url_meta":{"origin":1251,"position":4},"title":"AI Is Not a Bubble. Denial Is the Real Problem","author":"","date":"March 26, 2026","format":false,"excerpt":"AI tooling is not going away. What a lot of people are calling a bubble looks more like denial in the face of tools that are already becoming normal developer infrastructure.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1245,"url":"https:\/\/wade.one\/blog\/2026\/04\/30\/documentation-now-needs-to-work-for-ai-agents-too\/","url_meta":{"origin":1251,"position":5},"title":"Documentation Now Needs to Work for AI Agents Too","author":"","date":"April 30, 2026","format":false,"excerpt":"Developer documentation is becoming an interface for AI agents as well as humans. That means clean markdown, metadata, and tool access matter more.","rel":"","context":"In "AI"","block_context":{"text":"AI","link":"https:\/\/wade.one\/blog\/category\/ai\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/posts\/1251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/comments?post=1251"}],"version-history":[{"count":1,"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/posts\/1251\/revisions"}],"predecessor-version":[{"id":1285,"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/posts\/1251\/revisions\/1285"}],"wp:attachment":[{"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/media?parent=1251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/categories?post=1251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wade.one\/blog\/wp-json\/wp\/v2\/tags?post=1251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"A](\"https:\/\/wade.one\/blog\/wp-content\/uploads\/2026\/04\/01-lock-chain.jpg\")
<\/p>\n