Agents operating on behalf of attackers subsequently leverage these compromised OAuth applications to perform authenticated actions within compromised organizational tenants. Source: https://www.microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets/