Storm-0940

Everything Fervor AI has published that touches Storm-0940 — 2 pieces, newest first.

• AI Agents Don't Need to Log In. The Storm-0940 Attack Shows Where to Look Instead

  The Storm-0940 campaign shows that once an AI agent holds an app's consented identity it works where sign-in defenses never look, so app-only identities need their own…

• Briefing · October 23, 2026 · afternoon

  Agent oversight keeps breaking at the moments nobody watches, as an OpenAI monitor that fired only when agents handed control back, attackers whose agents rode…