OAuth consent

Mistral bought Pimento to staff its Vibe assistant and has said nothing about the ad-creative tool 180 brands use. Export brand kits, confirm rights to past creative, and review its ad-account access now.

Stilla's founders promised continuity the day Meta's purchase was reported. Meta's own stated reason for buying is merchant messaging on WhatsApp, not the workplace agent you run on Slack and GitHub. The continuity promise came from the party about to stop existing.

ServiceNow's purchase of Sweep hands a Salesforce competitor a metadata-deep connection into its customers' Salesforce orgs. Salesforce's partner agreement lets it terminate that relationship immediately on written notice, triggered by the announcement itself — and the customer is not a party to it.

Adobe licensed Rilo's technology and hired its six-person team; Rilo shuts down. But Rilo was a free-tier agent platform wired into 100+ systems, and the OAuth grants it holds in your Slack, Salesforce and Gmail outlive the company that issued them.

Microsoft scoped its 'not affected' statement to one CVE. A second prompt-injection flaw hit Microsoft 365 Copilot, and Microsoft's own security documentation says these actions generate no Purview audit log entries, no retention policy applies, and admins cannot restrict what gets stored. Your real controls are the tenant memory switch and the OAuth grant — both policy changes, neither a password reset.