✉news EnvironmentWeather first seen 6 h ago, last 8 min ago, peak #7
Storm-3168 JADEPUFFER Attack Exploits Azure Service Principals
Original: Active Exploitation Alert: Storm-3168 (JADEPUFFER) Agentic Attack Targets Azure via Compromised Service Principals
Microsoft is tracking active exploitation by the threat actor Storm-3168, also known as JADEPUFFER, which uses AI-driven 'agentic' attack techniques against Azure environments. The campaign relies on compromised service principals — non-user identities used by applications — to gain access to cloud resources. Security teams are being urged to audit service principal credentials, rotate secrets, and monitor for anomalous identity activity in their Azure tenants.
Why now: Active exploitation of widely used Microsoft Azure cloud infrastructure raises immediate security concerns for organisations worldwide.
Storm-3168JADEPUFFERMicrosoft AzureMicrosoft
Rank over time, top of the chart is #1. 6 snapshots from 6 h ago to 8 min ago.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/994992