Article
3 MIN
The Integration Token Nobody Was Watching
Attackers used OAuth tokens from a sales chat integration to export CRM data from hundreds of organizations, then searched it for more credentials. Most victims had strong login security. The tokens went around it.