Storm-3168: Agentic-driven cloud attacks using compromised service principals

Reported by Microsoft Security (Microsoft Security Research, Yossi Weizman and Tushar Mudi)

Summary by Cyber Security News25 Sep 2026, 17:35 CEST

About this summary. This is a short, independently written summary of an article first published by Microsoft Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.microsoft.com/en-us/security/blog/2026/09/25/storm-3168-agentic-driven-cloud-attacks-using-compromised-service-principals/

Attack overview Technical analysis Mitigation and protection guidance References Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first documented agentic ransomware operation.

Read the full article at Microsoft Security →

Source attribution: headline and facts are from Microsoft Security (microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.