Evidence · DiggingBeagle record
Microsoft Security: Threat actors use agentic AI tooling to find and abuse exposed secrets
Microsoft observed threat actors using agentic tooling to find secrets exposed in public GitHub repositories and to move through Entra service principals into privileged Azure services. One reported chain moved from a discovered GitHub secret to Azure Key Vault exfiltration in about five minutes. The provider documented cloud API corrections but did not determine which steps were model-autonomous versus manually directed. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
Microsoft observed threat actors using agentic tooling to find secrets exposed in public GitHub repositories and to move through Entra service principals into privileged Azure services. One reported chain moved from a discovered GitHub secret to Azure Key Vault exfiltration in about five minutes. The provider documented cloud API corrections but did not determine which steps were model-autonomous versus manually directed. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsMicrosoft traces agentic cloud-secret abuse from GitHub into Azure Key Vault: One reported chain moved from a discovered GitHub secret to Azure Key Vault exfiltration in about five minutes. The provider documented cloud API corrections but did not determine which steps were model-autonomous versus manually directed.
Campaign analysis; five-minute GitHub-to-Key-Vault chain; Entra cross-tenant access
- supportsMicrosoft traces agentic cloud-secret abuse from GitHub into Azure Key Vault: Microsoft observed threat actors using agentic tooling to find secrets exposed in public GitHub repositories and to move through Entra service principals into privileged Azure services.
Campaign analysis; five-minute GitHub-to-Key-Vault chain; Entra cross-tenant access
- supportsMicrosoft traces agentic cloud-secret abuse from GitHub into Azure Key Vault: Microsoft documented compromised Entra service principals and use of multitenant application credentials in campaigns where agentic tools located exposed secrets. The affected cloud scopes determined the resources that could be reached.
Service principals, cross-tenant access, and five-minute GitHub-to-Key-Vault sequence