Made by Microsoft. No known exploited vulnerabilities on record.
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders.
The latest developments from the last 30 days, newest first.
JadePuffer agentic AI attacks target Azure, destroy cloud resources
Basis: Reporting by BleepingComputer
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
Basis: Reporting by Dark Reading
