Microsoft: attackers' ARTEX agent went from a leaked GitHub secret to Azure Key Vault data in 5 minutes

Published Nov 5, Microsoft Threat Intelligence says threat actors have used the agentic framework ARTEX since August to mass-search public GitHub repos for cloud credentials and AI API keys, then sign in as the leaked OAuth apps to enumerate resources, read Key Vaults, and run commands on VMs. Treat any secret that ever hit a public repo as compromised: rotate it and move apps to managed identities.