oauth
The AI Agent Has Your Keys. It Never Gave Them Back.
When a hacker wants access to a corporate system, they traditionally need something: a password, a session cookie, a phishing link clicked at the right moment. They need a human to make a mistake. The EvilTokens platform, documented in May 2026, had a better approach. It did not need mistakes.