SecuritySep 25, 2026

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders. The post Storm-3168: Agentic-driven cloud attacks using compromised service principals ap…

Published by Microsoft Threat IntelligenceOpen original story

Magazine Core indexes and summarizes the source. The complete article remains with its original publisher.

Keep reading

More from Security

SecuritySep 25, 2026

Agentic autofix now uses Copilot Memory

Agentic autofix now uses Copilot Memory for customers who’ve enabled it. When you use agentic autofix, it reviews existing memories for context that can help resolve security aler…

GitHub ChangelogSource