Microsoft researchers report that hackers are using agentic AI tools such as Artex to target downstream tenants by scanning GitHub repositories for exposed credentials. The AI tools automate the search for sensitive information, raising concerns about how easily attackers can find and use stolen credentials.
This matters for banks, insurers and healthcare groups that rely on secure code to protect customer data and operations. Firms in regulated sectors should review their access controls and monitor for unauthorised exposure of secrets in public or shared code repositories.
