{"data":{"id":"2fd0a068-6104-4732-8d39-3fe14237d3b4","title":"Autonomous agents attack Azure using compromised identities, destroying resources","summary":"Microsoft reports that Jadepuffer, an autonomous AI attacker also tracked as Storm-3168, has expanded into Azure environments using two compromised service principals in the same tenant. One principal performed reconnaissance over more than 15 hours with over 300 successful read operations, while the other handled discovery, destructive actions and credential collection. Within about 35 minutes the attackers attempted more than 150 destructive or credential-related operations, including over 100 storage account deletions, most of them successful.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4227657/autonomous-agents-attack-azure-using-compromised-identities-and-destroying-resources.html","publishedAt":"2026-09-28T14:22:22.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Azure","Jadepuffer","Sysdig"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-28T14:22:22.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}