Threat actors use agentic AI tooling to find and abuse exposed secrets

T1Covered by 1 source · first reported by Microsoft Security Blog at 05 Nov, 23:46 UTC

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in the application’s tenant. Agents…

devsecurity

Sources

• T1Threat actors use agentic AI tooling to find and abuse exposed secretsMicrosoft Security Blog05 Nov, 23:46