Threat actors use ARTEX AI to steal Azure Key Vault secrets
Microsoft says one agent went from GitHub searches to Key Vault access in five minutes, using stolen service principals.
Microsoft says one agent went from GitHub searches to Key Vault access in five minutes, using stolen service principals.
Microsoft Threat Intelligence observed ARTEX AI agents automating GitHub secret discovery and Azure Key Vault theft in five minutes.
Attackers use ARTEX agentic AI to abuse GitHub credentials and exfiltrate Azure secrets in five minutes.
The researcher says five issues paid $200,000 and can reach Key Vault, Azure SQL and services such as Jira.
The comparison covers cloud KMS, enterprise custody, secrets engines, and HSMs, with post-quantum readiness as a selection criterion.
Thales, AWS KMS, and Fortanix top a 2026 ranking of encryption key-management platforms.
Trellix warns AI agent workflows can leak credentials from vaults into commands, logs, and model context.
A 2026 roundup compares 12 secrets-management tools, ranking HashiCorp Vault, cloud vaults, Akeyless, and ephemeral-access brokers.
Microsoft says Storm-3168 used stolen Azure identities to delete cloud resources within about seven minutes.
JadePuffer, tracked as Storm-3168, used AI-driven attacks to wipe Azure storage and other cloud resources.
Microsoft says Storm-3168, or Jadepuffer, used compromised Azure service principals to delete cloud resources and collect credentials.
A 2026 buyer's guide compares 12 cloud encryption platforms and favors native cloud KMS.
Microsoft says Storm-3168 used compromised Azure service principals to delete cloud resources and collect storage keys.
A 2026 industry report ranked HashiCorp Vault as the top secrets management tool, emphasizing dynamic credentials and cloud-native integrations.
A 2026 buyer's guide reviews ten cloud encryption and key management platforms, spanning hyperscaler-native KMS and dedicated multicloud sovereignty solutions.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views