AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

MediumNews

Autonomous agents attack Azure using compromised identities, destroying resources

Source: CSO Online(opens in a new tab)
Published: September 28, 2026
Record updated: October 9, 2026

Summary

Microsoft reports that Jadepuffer, an autonomous AI attacker also tracked as Storm-3168, has expanded into Azure environments using two compromised service principals in the same tenant. One principal performed reconnaissance over more than 15 hours with over 300 successful read operations, while the other handled discovery, destructive actions and credential collection. Within about 35 minutes the attackers attempted more than 150 destructive or credential-related operations, including over 100 storage account deletions, most of them successful.

Details

Scores and exploitation

Disclosure date: September 28, 2026

Affected

Vendors: Microsoft

Classification

Attack type: Other
Attack sophistication: Advanced
AI component targeted: Agent
Impact: Confidentiality,
Integrity,
Availability
Labels: security,
industry

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://www.csoonline.com/article/4227657/autonomous-agents-attack-azure-using-compromised-identities-and-destroying-resources.html

First tracked: September 28, 2026 at 02:00 PM ET, from CSO Online

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 80% (self-assessed)

Corrections

2026-10-10: Severity changed from high to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Topics

AI agents

Summary

Topics

Related items

Summary

Topics

Related items