Azure ransomware attack: Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service ...

In an incident observed in early June 2026, attackers used two compromised service principals application identities used to ...

JADEPUFFER used compromised Azure service principals to delete most targeted storage accounts in an 18-hour intrusion, ...

Storm-3168 used stolen Azure identities to map an environment, destroy cloud resources and collect storage keys within ...

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage and ...

In July, Sysdig threat hunters uncovered JadePuffer, the first-ever documented agentic ransomware infection in which an LLM drove the entire extortion operation, from gaining initial access to ...

Microsoft traced an automated Azure attack to compromised service principals used to map cloud resources, delete storage and ...

This article is the Japanese version of the following article published on 2026/8/3: How Postman Passport keeps API secrets inside your network practice of distributing API keys to every user who nee ...

Confirmed on September 26, 2026Organizations using Azure Front Door classic must complete their migration to Standard or ...

Discover how private metered API payments via zkAPI on Ethereum enable secure, unlinkable transactions without exposing user ...

Mythos AI found a critical Rejetto HFS flaw enabling admin-session forgery and arbitrary code execution via predictable Math.random() keys.