Shadow AI hidden in SaaS apps is driving a surge in cyberattacks, with OAuth token abuse and agentic AI enabling cascading data breaches.