Security News Toxic Combinations: When Cross-App Permissions Stack into Risk TheHackerNews Daniel Bender 22 Apr 2026 Toxic combinations form when AI agents, integrations, or OAuth grants bridge SaaS apps into trust relationships no single admin authorized.