Security researchers report that JadePuffer, an agentic AI-driven attack framework, has been used against Microsoft Azure tenants, deleting virtual machines and other cloud resources across compromised subscriptions. The campaign reportedly abuses stolen or misconfigured Azure credentials, allowing attackers to gain high-privilege access, automate destructive actions through Azure APIs, and move laterally across tenants using scripted playbooks and cloud-native tooling. Experts warn organizations to review identity permissions, rotate keys, harden Azure configurations, and improve monitoring for unusual automation patterns, while cloud incident response teams investigate the scale, origin, and potential refinement of JadePuffer tactics.
This update represents a notable development in the Ai sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.