JADEPUFFER CRIMS HIJACKED AZURE IDENTITIES AND USED THEM TO BLOW UP CLOUD RESOURCES

Summary from the TLDR InfoSec newsletter

Microsoft linked Storm-3168, the actor behind JadePuffer (the first documented agentic ransomware), to an 18-hour June attack in which two hijacked Azure service principals were used for reconnaissance and then destruction, likely after an employee exposed client secrets in a public GitHub issue.