@MsftSecIntel caught attackers using an agentic AI framework, ARTEX, to hunt exposed secrets on public @github and move into @Azure tenants in as little as five minutes. GitGuardian has tracked this attack path since 2017.
1:31
GitGuardian
This account is verified because it's an official organization on X. Learn more@GitGuardian
GitGuardian helps enterprises close credential-based breach paths. It finds secrets wherever they live and prioritizes remediation. 🏆 #1 securityApp on GitHub.
571 Following 6K Followers 6.5K Posts
Latest posts 5
28.6 million secrets leaked on public GitHub in 2025.
gitguardian.com/state-of-secre…
gitguardian.com/state-of-secre…
www.gitguardian.com The State of Secrets Sprawl 2026 | GitGuardian Annual Report AI is fueling secrets sprawl: GitGuardian’s 2026 report reveals an 81% surge in AI-service leaks as 29M secrets hit public GitHub. Binance’s initial investigation suggests a compromised DevOps engineer’s laptop may have been the way in.
Could YOU list the production credentials on your engineers’ laptops?
How to scope a laptop compromise: blog.gitguardian.com/blast-radius-l…
Could YOU list the production credentials on your engineers’ laptops?
How to scope a laptop compromise: blog.gitguardian.com/blast-radius-l…
blog.gitguardian.com Blast Radius After a Laptop Compromise: What to Rotate After a laptop compromise, the hard question is which credentials were on it. See why blast radius scoping is hard, and how to turn it into a revocable list. More and more people shipping code on GitHub never trained as developers. @github’s Octoverse 2026: industry-linked public repos grew from ~9M in 2022 to 25M this year.
Every new builder and agent adds API keys. We wrote about it:
blog.gitguardian.com/github-octover…
Every new builder and agent adds API keys. We wrote about it:
blog.gitguardian.com/github-octover…
blog.gitguardian.com GitHub Octoverse 2026: Five Takeaways for Security Teams GitHub’s Octoverse 2026 counted 34.3 billion commits, and over 40% of pull requests now start with an AI agent. Read to learn what the State of the Octoverse 2026 Report reveals about AI, citizen... Think your Artifactory token is safe in that Jenkinsfile?
So did the last company... until their CI/CD pipeline became an attack vector.
Read-only tokens can still write your downfall. devopsdigest.com/the-hidden-dan…
#DevOps #Security
So did the last company... until their CI/CD pipeline became an attack vector.
Read-only tokens can still write your downfall. devopsdigest.com/the-hidden-dan…
#DevOps #Security