Microsoft Azure threat report

Microsoft detected Storm-3168 (JADEPUFFER), a sophisticated threat actor leveraging agentic AI orchestration to exploit compromised Azure service principal credentials. The attackers conducted reconnaissance and executed rapid destructive operations across Azure environments, including deletion of storage accounts, key vaults, SQL databases, and backup/recovery resources. The campaign demonstrates the first documented instance of agentic ransomware operations targeting cloud infrastructure, with attackers successfully exfiltrating credentials and disabling recovery mechanisms across multiple victim organizations.