ARTEX Attack Explained: GitHub secret to Key Vault in 5 minutes
AI agents are searching public GitHub for leaked secrets, and they move fast. Microsoft Threat Intelligence found agents using ARTEX, an AI framework built for red teams, to go from a GitHub search to stealing data from a company’s Azure Key Vault in five minutes.
In this video, we break down what’s happening, why deleting a leaked key doesn’t fix anything, and how to check your company’s exposure today.
What you’ll learn:
- How the ARTEX agents find and test leaked credentials on GitHub
- Why they’re faster than anything security teams have faced before: they fix their own failed requests in about a minute
- Why 64% of secrets leaked in 2022 are still active today
- Why a leaked secret stays dangerous until you revoke it
- How to scan your company’s repositories and check your public GitHub exposure for free
Start your free 30-day Business trial of the GitGuardian platform and scan your company’s repositories across their full git history: https://www.gitguardian.com/pricing
Run the free GitHub Security Audit on your company’s domain: https://www.gitguardian.com/github-security-audit
Read our full analysis: https://blog.gitguardian.com/the-agents-have-now-found-your-secrets-on-github-artex-is-abusing-public-secrets-right-now/
Microsoft Threat Intelligence report: https://www.microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets/
State of Secrets Sprawl 2026: https://blog.gitguardian.com/the-state-of-secrets-sprawl-2026/
Chapters
0:00 GitHub is at the center of a coordinated AI agent attack
0:12 What Microsoft found: GitHub search to Azure Key Vault in 5 minutes
0:24 ARTEX: a red team tool used in real attacks
0:43 64% of leaked secrets still work
0:56 Scan your company’s repositories
1:16 Free GitHub Security Audit
#secretssecurity #cybersecurity #github