Observed incident

Stolen workload credentials enable cloud data theft; AI attribution varies

Reported

Published here

What happened

Microsoft describes agentic tooling, including ARTEX, finding exposed secrets and accessing cloud resources. Its linked campaign analysis overlaps Todyl’s Key Eater investigation of stolen application credentials used across Entra ID, Azure and Microsoft 365.

Parties and reporting

AI tools and systems: Stolen Entra application credentials, Azure Key Vault and Microsoft 365, ARTEX reported by Microsoft; no specific framework established by Todyl

Outcome

Todyl reports access reaching 27 organizations, including downstream customers, and collection of files and mail. Microsoft reports rapid Key Vault exfiltration in one observed chain. Final containment and aggregate losses are not established.

Operating lesson

Revoke exposed workload credentials, review application permissions and token activity, and investigate access to downstream tenants and secret stores.

Evidence and limits

Todyl’s November 3 disclosure precedes Microsoft’s November 5 coverage. Todyl assesses AI assistance with low confidence and does not establish ARTEX use. Its initial credential source remains unknown. The reports cover overlapping but different observations; their counts are not additive. Todyl distinguishes this campaign from Storm-0940. Neither report establishes a Microsoft platform breach.

Sources