Latest / The Digital Warfare Podcast
EP. 169: JadePuffer Uses AI Agents to Destroy Microsoft Azure Resources
Summary
Fresh reporting details destructive Microsoft Azure activity associated with JadePuffer, which Microsoft tracks as Storm-3168. Attackers used two compromised Azure service principals to perform reconnaissance, collect credentials and attempt destructive operations across a compromised Azure tenant.
Microsoft observed targeting of Azure Storage Accounts, Key Vaults, Function Apps, Virtual Machines, App Services, SQL databases and recovery protections. The destructive stage lasted roughly seven minutes and included attempts against more than 100 storage accounts.
The incident…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.