Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI agents are searching public GitHub for leaked secrets, and they move fast. Microsoft Threat Intelligence found agents using ARTEX, an AI framework built for red teams, to go from a GitHub search to stealing data from a company’s Azure Key Vault in five minutes. In this video, we break down what’s happening, why deleting a leaked key doesn’t fix anything, and how to check your company’s exposure today.

What is credential harvesting, and why are developer laptops the best place to look for secrets? Attackers collect passwords, API keys, tokens and session cookies at scale, then use them or sell them. And with infostealer malware, they don't need to phish you at all.

Security teams have been outnumbered 50 to 100 to 1, and the old model of finding vulnerabilities and tossing them to engineers is breaking down. Anshuman Bhartiya, Staff Security Engineer at Lyft, explains why that silo has to collapse and what replaces it. "We have to take a step back. We have to think about entire vulnerability classes and we have to think about, okay, how has the SDLC changed now? Are developers using coding agents?".