ShinyHunters OAuth Token Harvesting Hits 5 Enterprises, Exposing Cloud Access Broker Patterns

ShinyHunters shifted from direct exploitation to systematic abuse of identity and SaaS trust relationships across multiple sectors. The pattern reveals a maturing access-broker economy that sells cloud sessions before public disclosure. Most reporting overlooks how procurement of permissive integrations created the conditions for these operations.