Azure ransomware attack: Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service ...

JADEPUFFER used compromised Azure service principals to delete most targeted storage accounts in an 18-hour intrusion, ...

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal ...

In an incident observed in early June 2026, attackers used two compromised service principals application identities used to ...

In July, Sysdig threat hunters uncovered JadePuffer, the first-ever documented agentic ransomware infection in which an LLM drove the entire extortion operation, from gaining initial access to ...

Cloudflare Data Platform on Thursday received a bland new brand name, Basin, and promotion from beta status to general ...

JadePuffer uses AI agents to target Azure tenants, steal credentials, and destroy cloud resources, including over 100 storage ...

Do you think of Cloudflare as just a "CDN and DNS company"? Having worked primarily with Azure, I viewed it that way for a ...

Storm-3168 used stolen Azure identities to map an environment, destroy cloud resources and collect storage keys within ...

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

Microsoft traced an automated Azure attack to compromised service principals used to map cloud resources, delete storage and ...

Microsoft has uncovered an Azure-focused destructive campaign tied to Storm-3168, also known as JADEPUFFER, in which ...