← Latest

Threat actors use agentic AI tooling to find and abuse exposed secrets

Opened

microsoft.com Nov 6, 2026 appseccloudvulnidentityaiprivacyartexctitooling

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in the application’s te

Also covered by

  • Microsoft Security