Feed / Azure
highAzuresecurity advisoryms_security_blog · Sep 25, 2026

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft warns of cloud attacks using compromised service principals linked to Storm-3168, advising on defense strategies.

“Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders. The post Storm-3168: Agentic-driven cloud attacks using compromised se”
View original article →
Security
cloud_securityendpoint_security
Audience
adminsecurity_engineer
Environment
cloud
Classification confidence: 95%
Loading correlations…
Storm-3168: Agentic-driven cloud attacks using compromised service principals | 365Forge