The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal ...

Azure ransomware attack: Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service ...

Two cloud security vulnerabilities — in Azure Bastion and Azure Container Registry — were found in Microsoft Azure's services, which "allowed an attacker to achieve cross-site scripting (XSS) by using ...

Orca’s existing GPT integration with its cloud-native application protection platform (CNAPP) receives a GPT-4 upgrade, along with a few other enhancements. Agentless cloud security provider Orca ...

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

In July, Sysdig threat hunters uncovered JadePuffer, the first-ever documented agentic ransomware infection in which an LLM drove the entire extortion operation, from gaining initial access to ...

As more organizations build applications with Azure AI services, security teams and developers are encountering new challenges tied to identity, data access and endpoint exposure. Traditional security ...

Multiple popular mobile applications for iOS and Android come with hardcoded, unencrypted credentials for cloud services like Amazon Web Services (AWS) and Microsoft Azure Blob Storage, exposing user ...