The Infinite Token Of Insecurity

In our rush to let AI tools 'help' us, we have littered our Google and Microsoft environments with eternal OAuth tokens. These digital ghosts have no expiration dates, meaning a brief moment of employee curiosity has created a permanent entry point for any clever attacker. It turns out workflow automation is excellent at automating the destruction of our security posture while we weren't looking. To fix this self-inflicted wound, one must manually hunt down and revoke these tokens, a task as pleasant as counting sand. If only we spent as much time on governance as we do on installing apps.