Microsoft warns hackers using AI agents to scan GitHub for API keys

Microsoft warned that hackers are using AI agent tools to scan public GitHub repositories for secrets — company names, cloud keys and AI service keys — around the clock. The activity has been running since August, and when an agent finds a working key it can be exploited.

Detected & updated continuously · Source: Nebula