Vercel in the news

Vercel confirmed a KVM zero-day vulnerability allowing virtual machine escape to gain root access on the host, reported by Paulos Yibelo who received a $50,000 bug bounty.

Cloudflare Workers excel for cost-effective global APIs within a 128MB memory limit, while Vercel Functions better support routes needing more memory or full Node.js capabilities.

Vercel confirmed a KVM zero-day vulnerability enabling guest virtual machines to gain root access on the host, paying a $50,000 bounty to the discoverer, independent security researcher Paulos Yibelo.

Open-weight AI models now account for the majority of token volume on Vercel's AI Gateway, driving a sharp decline in average token prices.

Vercel is gaining traction as AI coding agents increasingly choose its platform for autonomous application deployment due to its simplicity and integration with Next.js, while also introducing new risks and governance challenges for enterprises.

Vercel experienced substantial revenue growth and client expansion by pivoting its business model to usage-based billing and focusing on AI coding agents.

Photon, a San Francisco startup, raised $4.5 million in seed funding to enable AI agents on messaging platforms like iMessage and WhatsApp through its Spectrum SDK.

A comparison between Vercel and Netlify in 2026 highlights their evolving pricing, features, and target workloads, with Vercel optimizing for Next.js and bursty traffic, and Netlify for multi-framework support and simplified billing.

The article discusses the escalating risks of "shadow AI" within enterprises, where employees use unapproved AI tools, potentially leading to data breaches and customer experience disruptions, as exemplified by the Vercel security incident.

Vercel's CEO confirmed that the recent security breach involved a wider network of attacks and separate, prior compromises affecting customer accounts, beyond the initial Context.ai incident.

Vercel resolved build failures and 500 errors for Edge runtime functions affecting a small number of customers.

Chinese AI models are rapidly gaining global market share due to performance improvements and cost-effectiveness, raising concerns in Washington about economic and security risks.

Vercel Labs launched scriptc, an experimental TypeScript-to-native compiler that generates small, fast executables with minimal resource usage but faces mixed performance reviews and skepticism regarding longevity and real-world applicability.

Scammers are exploiting Vercel to host phishing sites impersonating Nepali banks to steal customer data through urgent, fake NID update requests.

Vercel Labs launched scriptc, an experimental TypeScript-to-native compiler that generates small, fast-starting executables, though it faces challenges with execution speed and third-party library compatibility.

A critical vulnerability in Next.js's ImageResponse feature allows server code execution through malicious SVG input, prompting an urgent update to version 16.3.6.

TypeSafe AI introduced Jev, a text-less AI model delivering rapid, precise decisions with confidence scores, demonstrating record-breaking adoption on Vercel's AI Gateway.

TypeSafe's Jev AI model rapidly gained nearly 13% adoption among Vercel's paid teams within 24 hours, but its commercial terms and long-term revenue impact remain undisclosed.

Jev, a specialized AI model from TypeSafe, quickly became the fastest-adopted model on Vercel AI Gateway due to its rapid decision-making, speed, and cost-effectiveness for AI agent tasks.

Open-weight AI models now constitute over half of the token throughput on Vercel AI Gateway, significantly increasing their usage but remaining a smaller portion of overall spending compared to high-priced models like Anthropic's.