AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

Storm-3168: Agentic-driven cloud attacks using compromised service principals

highnews

security

Source: Microsoft Security BlogSeptember 25, 2026

Summary

Microsoft discovered JADEPUFFER (also called Storm-3168), a threat actor using AI-orchestrated attacks to destroy Azure cloud resources through compromised service principals (identities that applications use to authenticate to cloud services). The attacker used these stolen credentials to delete storage accounts, databases, and other critical resources across multiple Azure subscriptions, demonstrating how AI-powered threats can coordinate complex attacks at scale.

Solution / Mitigation

Organizations can reduce exposure by protecting workload identities and secrets, enforcing least privilege (giving users and applications only the minimum permissions they need), safeguarding recovery resources, and enabling relevant Microsoft Defender for Cloud protections. Additionally, publicly exposed credentials must be revoked or rotated, as simply removing the original disclosure does not remediate the exposure. Azure resource locks and storage account-level deletion protection proved effective at blocking some deletion attempts.