Incident
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
Why it matters: Microsoft says the actor behind JadePuffer, the first documented agentic ransomware, hijacked two Azure service principals and deleted storage accounts, so protect workload identities and rotate exposed secrets.
Covered by 3 outlets
- The Register - JadePuffer crims hijacked Azure identities and used them to blow up cloud resources ()
- Microsoft Security Blog - Storm-3168: Agentic-driven cloud attacks using compromised service principals ()
- Dark Reading - JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack ()
Published