CyberNotableUnknown
5.3
AI agents can exceed permissions via valid credentials; Token Security urges agent-specific policy enforcement
BleepingComputerLO·2 days ago
OAuth grants are proliferating across SaaS and AI tools, outpacing security review capacity. The recent Klue breach demonstrates attackers exploiting forgotten grants to access corporate data, highlighting a systemic identity-layer vulnerability.