- Published
- Source
- The Hacker News
- Filed under
- Microsoft, Cloud, Attacks
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor's tradecraft. The attack took place in early June 2026 over a period of about 18…
Cloud checks worth doing
- Know every account and subscription you run – the forgotten ones are where exposures hide.
- Nothing public by default: storage, keys and admin consoles closed to the internet, and code scanned for secrets.
- Turn on the provider's audit logs, and alert on new access keys, policy changes and anything made public.
MyCyberWay training
Blue Team Engineer · Cloud Security Engineering
Most cloud breaches are configuration. Learn to get it right.
Blue Team Engineer covers CSPM at scale, CIS hardening, cloud-native detection and response, and mapping Azure controls to AWS and GCP – configured hands-on in your own tenants.
- CSPM and CIS hardening
- Cloud-native detection and response
- Azure, AWS and GCP
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
