{"data":{"id":"3fe8e3c2-740d-4360-9e9a-c6171e0c9158","title":"JadePuffer agentic AI attacks target Azure, destroy cloud resources","summary":"The JadePuffer ransomware operator, tracked by Microsoft as Storm-3168, is using AI agents to automate attacks against Azure tenants, from reconnaissance and credential theft to destruction of resources. In two June attacks, the actor used two compromised service principals from the same tenant to map cloud resources, retrieve storage account keys and delete more than 100 Azure Storage accounts within seven minutes, while some accounts survived because of Azure resource locks and storage account-level protections. Microsoft could not determine how initial access occurred, though credentials for one service principal appeared in a public GitHub issue before the attacks.","solution":"The researchers recommend activating cloud workload protections, checking for secrets in public repositories, and evaluating Azure RBAC permissions against least-privilege principles.","labels":["security","industry"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/jadepuffer-agentic-ai-attacks-target-azure-destroy-cloud-resources/","publishedAt":"2026-09-28T15:49:27.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft Azure","Azure Storage","Azure SQL","Azure Key Vault","Azure Function Apps","Azure Site Recovery","EncForge"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-28T15:49:27.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"training_data","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null}}