{"data":{"id":"6e3d1f2a-7c68-43a6-b6a8-f066e44631ed","title":"OAuth grants pile up faster than you can review them. Here's how to keep up.","summary":"Nudge Security, a vendor, promotes its product for governing OAuth grants that employees create when they approve third-party apps. The article cites an attack in which a compromised OAuth token from the third-party AI tool Context.ai let an attacker into Vercel after one employee had connected it to their Google Workspace account. It also reports that employees create an average of 88 OAuth grants each, 31 with data-level permissions.","solution":"Nudge Security provides OAuth grant visibility, including dormant grants, and surfaces API keys, service accounts and remote MCP server connections. The source does not describe any other mitigation beyond this product.","labels":["security","industry"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/oauth-grants-pile-up-faster-than-you-can-review-them-heres-how-to-keep-up/","publishedAt":"2026-10-08T14:00:10.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Context.ai","Vercel","Nudge Security"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-08T14:00:10.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null}}