Back edge.prnewswire.com

Link

edge.prnewswire.com • April 21, 2026

On April 19, 2026, Vercel disclosed that attackers compromised an employee's Google Workspace account through a malicious OAuth 2.0 application originating from Context.ai, a third-party AI tool. This post breaks down how the attack worked, what OAuth scopes were abused, and how organizations can detect and respond to these threats with and without SlashID.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SlashID Launches Mutual TOTP to Combat Social Engineering Attacks On April 21, 2026, SlashID announced the launch of Mutual Time-based One-time Password (TOTP), a cryptographic verification solution designed to prevent impersonation attacks, particularly through social engineering methods like vishing and deepfake impersonation. This new capability allows for bidirectional identity verification in real-time, addressing the significant trust gap that exists in traditional multi-factor authentication (MFA) systems. Social engineering accounted for 36% of all enterprise breaches last year, with vishing alone representing 11% of infection investigations. The Mutual TOTP solution operates without the need for biometrics, hardware tokens, or face scanning, making it less invasive and more practical for widespread use. It significantly reduces onboarding friction and privacy concerns associated with traditional identity verification methods. The solution is designed for various interactions, including employee-to-employee calls and vendor onboarding, and can be deployed quickly and cost-effectively. This innovation aims to enhance security in environments where traditional defenses have proven inadequate against sophisticated impersonation tactics. 1 sources 58

Extracted Entities

Link

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Platforms (1)