Microsoft: threat actors use agentic AI tool ARTEX to harvest exposed secrets from GitHub
davemccollough · x · 2026-11-06
Microsoft Threat Intelligence reports threat actors using an agentic AI tool (ARTEX) to scan public GitHub repos for exposed secrets and credentials, then weaponizing them in follow-on attacks. While secret-scanning is a well-known technique, agentic tooling scales and accelerates scanning, output analysis, and follow-on activity. Microsoft is also investigating successful service principal sign-ins involving multiple application IDs.
More from Safety
- OpenAI launches GPT-6 Cyber, a security research model already used by Mozilla and Cisco — JiaweiLiu_ · 2026-11-06
- Supply-chain vector in almost every codebase: unpinned GitHub Actions can change under you — andersonbcdefg · 2026-11-06
- METR publishes independent assessment of Anthropic's AI R&D acceleration, evidence heavily redacted — rohanpaul_ai · 2026-11-06
- Unfixed CPython 0-days threaten the AI supply chain, researcher says — Thrumpwart · 2026-11-06
- UK cyber bill adds 'loss of oversight or control of an AI agent' clause, still undefined — mclynd · 2026-11-06
- Dev warns: don't link your bank account to AI companies — arthurcolle · 2026-11-06