security: Beyond source code: A path to the keys to the kingdom
Microsoft Security Blog
2026-09-29
Microsoft describes how Storm-3068 used a compromised identity to expand access into cloud environments, moving beyond source code exposure to broader infrastructure compromise. The post focuses on defensive steps for protecting identities, CI/CD pipelines, and cloud infrastructure.