> TritonInfoSec News
Home / Sep 29, 2026 / Story
0
#6 The Hacker News general September 28, 2026 at 09:08 UTC

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

By [email protected] (The Hacker News)

AI Summary

Microsoft-tracked threat actor JADEPUFFER (Storm-3168) conducted a destructive Azure attack in early June 2026, using compromised service principals to delete cloud-based storage, applications, and databases over approximately 18 hours. The agentic attack methodology — involving automated reconnaissance, credential theft, and resource destruction — represents an evolution in cloud-targeting TTPs that security teams must account for in Azure IAM and monitoring configurations.

Read full article → https://thehackernews.com/2026/09/jadepuffer-linke…

Relevance score: 82.0/100

# More from September 29

  1. 1
    CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally The Hacker News
  2. 2
    Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug SecurityWeek
  3. 3
    Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Krebs on Security
  4. 4
    ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns The Record
  5. 5
    Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M The Hacker News
  6. 7
    Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon SecurityWeek
  7. 8
    New Attack Against RSA Schneier on Security
  8. 9
    Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent The Hacker News
  9. 10
    Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks The Hacker News