September 30, 2026
- Storm-3168, the operator behind the JadePuffer agentic ransomware case, compromised two Azure service principals in the same tenant over an 18-hour window in early June and used them for extensive Azure resource destruction and cloud credential collection. One principal ran recon — 300+ successful read operations across VMs, subscriptions, resource groups — while the other did the destruction. Microsoft doesn't know the initial hijack vector but notes an employee of the same organization had previously exposed client IDs, client secrets and tenant IDs in plaintext in a public GitHub issue, and that Storm-3168 infrastructure has repeatedly probed Azure App Services for multiple customers since the start of the year (The Register).
· Cloud & Identity
in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%
September 29, 2026
- JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals from the same tenant to map resources and then delete them — a destructive stage lasting seven minutes against more than 100 storage accounts plus Key Vaults, Function Apps, VMs and App Services, in an ~18-hour June operation. Azure resource locks and storage-account-level protections saved some accounts; SQL database deletion failed because the attacker used an unsupported API version. Credentials for one service principal had appeared in a public GitHub issue before the attack (BleepingComputer, The Hacker News). Roughly half an hour after the wipe, the actor returned for 30+ storage-key requests, most successful.
· Cloud & Identity
in PitScaler Goes Global: Citrix NetScaler Chain Exploited for Weeks Before Anyone Had a Patch
September 27, 2026
- Microsoft details Storm-3168 abusing compromised Azure service principals for reconnaissance, resource deletion and credential access, linking the activity to JADEPUFFER and publishing defender guidance (Microsoft).
· Cloud & Identity
in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week
July 21, 2026
- The Hugging Face agentic breach escalated into AI-targeted ransomware. The autonomous JadePuffer agent behind last week's intrusion now deploys custom malware dubbed EncForge that specifically encrypts AI assets — training datasets, vector databases, and model checkpoints (earlier coverage). Notably, defenders found commercial AI models got in the way during forensics because safety guardrails couldn't distinguish exploit data from real attack traffic. BleepingComputer, The Decoder.
· AI & Model Security
in Microsoft Graph Becomes a Spy's Dead Drop as WordPress "wp2shell" Exploitation Goes Live
July 20, 2026
- Hugging Face's July intrusion was, per its own account, executed entirely by an autonomous AI agent system that abused malicious datasets to reach code-execution paths. Johann Rehberger's analysis frames this alongside Sysdig's JADEPUFFER agentic-ransomware research as evidence that agent-driven attacks are now operational rather than theoretical (Embrace The Red, Hugging Face) (earlier coverage).
· AI & Model Security
in AI Moves From Threat Model to Threat Actor: Autonomous Intrusions and a Shrinking Cyber Gap
July 9, 2026
- CISA added actively-exploited Adobe ColdFusion (CVE-2026-48282), Langflow, and two Joomla extension flaws to its KEV catalog, giving federal agencies a Friday deadline. The Langflow auth bypass is the same flaw the LLM-driven JADEPUFFER operator exploited last week. BleepingComputer, The Hacker News
· Vulnerabilities & Exploits
in A 15-Year-Old Linux Kernel Bug Hands Root on Every Distro
July 3, 2026
- Sysdig says it captured the first documented case of agentic ransomware: an operator it dubs JADEPUFFER in which a large language model handled the entire chain — breaking into an internet-facing Langflow instance via CVE-2025-3248, stealing credentials, moving laterally, then encrypting and wiping a production database. Sysdig, The Hacker News.
· AI & Model Security
in Ransomware on Autopilot, and a Pile of Critical Bugs Under Fire