Two things happened this month that should make every business owner pause.
First, Vercel — the cloud platform powering millions of websites and apps — was breached through a third-party AI tool. Hackers compromised an employee’s account via Context.ai, a vendor Vercel itself used. Once inside, they accessed internal systems and environment variables. A “limited subset” of Vercel customers had credentials exposed. The attackers tried to sell the data for $2 million.
Second, Microsoft had a month from hell. M365, Teams, Outlook, and Azure went dark on April 8. Teams video and audio failed across UK cities on April 15. Azure UK South suffered an “unreported outage” on April 17, disrupting over a thousand subscriptions. Then, on April 20 — today — Microsoft had to revert a service update that was locking Teams desktop users out entirely. Oh, and a Windows Server security update caused domain controllers to crash and restart repeatedly.
Neither incident was a simple server hiccup. Both reveal the same ugly truth: your security is only as strong as your weakest vendor link.
The Supply Chain Problem
Modern businesses don’t run one stack. They run SaaS tools, cloud platforms, AI assistants, dev tools, and a dozen integrations holding it all together. Each connection point is a potential entry for attackers. Vercel didn’t get hacked through its own code — it got hacked through someone it trusted.
That “trust but verify” thing your IT team talks about? It needs to actually happen.
What This Means for Your Business
You might think, “We’re not a tech company, so this doesn’t apply to us.” Wrong. If you’re using Microsoft 365, if your website runs on a cloud platform, if your CRM connects to anything — you’re in the stack.
The businesses that get blindsided aren’t reckless. They’re just not monitoring their vendor exposure the way they should.
NSI Tech helps you close those gaps. We audit your existing setup, lock down your cloud configurations, and make sure the tools you depend on aren’t quietly exposing you.
If it’s been a while since someone looked at your full tech picture, let’s talk.