Back to updates

Cloud Security - 1

2026 (3)

September (3)

security: ​​Beyond source code: A path to the keys to the kingdom

Microsoft Security Blog

2026-09-29

Microsoft describes how Storm-3068 used a compromised identity to expand access into cloud environments, moving beyond source code exposure to broader infrastructure compromise. The post focuses on defensive steps for protecting identities, CI/CD pipelines, and cloud infrastructure.

security: Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft Security Blog

2026-09-25

Microsoft describes Azure attacks linked to Storm-3168 using compromised service principals, including reconnaissance, resource deletion, and credential access. The post links the activity to JADEPUFFER and includes defender guidance.

security: Passkey-themed social engineering leads to identity and cloud compromise

Microsoft Security Blog

2026-09-09

Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.