Why AI Agent Authorization Is Still Unsolved in...

In March 2026, a security scanner called Trivy was compromised for less than a day. The stolen credentials cascaded downstream into LiteLLM, a library used by thousands of companies to connect their applications to AI services. Within 40 minutes, attackers harvested credentials from an estimated 500,000 machines across 1,000 SaaS environments. Mercor, a $10 billion AI recruiting startup that handles contractor data for OpenAI, Anthropic, and Meta, was one of those companies. Meta indefinitely su