Security tool releases, updates, and open-source picks for IT practitioners.
A free, read-only PowerShell audit that lists every AI application holding OAuth consent in your Microsoft Entra ID tenant — who approved it, what it can read, and whether it holds a refresh token that survives a password change.
One employee clicking Accept on an AI app can grant it standing access to everything that user can reach. Tenant-wide admin consent extends that to everyone. Neither shows up in a vulnerability scan, and neither is revoked by a password reset.
