security: Threat actors use agentic AI tooling to find and abuse exposed secrets
Microsoft Security Blog
2026-11-05
Microsoft Threat Intelligence observed threat actors using the agentic offensive security framework ARTEX to search GitHub for exposed OAuth application secrets. Compromised OAuth applications were then used to carry out authenticated actions inside affected organizations' tenants.