Long ReadThe Shadow SaaS Kill Chain: When OAuth Breaks How ShinyHunters weaponised the permission dialogue to bypass MFA at Google and Allianz. David HawksFebruary 8, 2026