SecurityThe Hacker Newsabout 3 hours ago
JADEPUFFER Attackers Delete Azure Resources via Compromised Principals
4 min read
Microsoft says Storm-3168, linked to JADEPUFFER, used two compromised Azure service principals in early June 2026 to delete storage accounts, SQL databases, and Key Vaults over about 18 hours. Credentials were exposed in a public GitHub issue. Most targeted storage accounts were deleted, though resource locks blocked some attempts.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft