AI-powered JadePuffer ransomware attacks destroy Azure resources
Researchers say the JadePuffer ransomware group has been using agentic AI to automate attacks targeting Microsoft Azure tenants, conducting reconnaissance, stealing credentials, and deleting cloud resources. Microsoft observed two such attacks in June affecting over 100 Azure storage accounts as well as Key Vaults, VMs, and other services. Attackers used compromised service principals to gain access, and some accounts survived due to built-in protections.
- JadePuffer uses AI agents for attack automation
- Attacks targeted over 100 Azure storage accounts
- Azure resource locks prevented some deletions
- Compromised credentials exposed in public GitHub issue
- Microsoft couldn't confirm data theft or ransom demands
Sources covering this
More in Cybersecurity
Critical zero-days in Citrix NetScaler exploited, patches released
Citrix has confirmed that two critical zero-day vulnerabilities affecting NetScaler ADC and Gateway devices have been exploited.
GitHub AI tool finds 24 vulnerabilities in Android apps
GitHub's Security Lab developed an open source AI agent that identified 24 vulnerabilities in Android applications using automated…
Apple fixes CoreGraphics flaw after targeted attacks
Apple has released security updates for iOS, iPadOS, and macOS to fix a CoreGraphics vulnerability that may have been used in highly…
Over 16,000 Supabase databases expose sensitive user data
Security researchers found over 16,000 Supabase databases with misconfigurations exposing user data including personally identifiable…