Safety, Security & Governance
28 min
The Confused Deputy Gets a Credit Card: Identity and Authority for AI Agents
Between 8 and 18 August 2025, attackers holding stolen OAuth tokens for a chatbot integration exported support tickets from hundreds of companies and grepped them for AWS keys. No model was jailbroken. The industry argues about w…