Anthropic’s September threat report describes a suspected ShinyHunters affiliate dumping more than 2,100 Azure AD token sets from over 40 corporate tenants in about 34 hours, with AI agents doing “nearly all of the work”.
Speed is the story: a human team would still be arguing over the ticket.
Again, where’re my device bound tokens? Not PRTs but all kinds of tokens.
Sources: Anthropic · SiliconANGLE
