Trusted Connections, Hidden Risks: Token Management in the Third-Party Supply Chain

This report warns that compromised OAuth tokens in third-party integrations pose a severe supply-chain risk: a single stolen or long-lived token can bypass defenses (including MFA), grant persistent access across many customer instances, and enable large-scale data exfiltration. Using case studies (Salesloft/Drift, CircleCI, Internet Archive) it identifies three recurring risks—dormant integrations, insecure token storage, and lack of rotation—and recommends token posture management, secure secret storage, centralized logging/monitoring, rapid revocation playbooks, and vendor governance to mitigate the threat.