Storm-3168: Microsoft warns of agentic-driven cloud attacks using compromised service principals

Microsoft links Storm-3168 to attacks targeting Azure using compromised service principals.

Published 6sem2 sources✓ ConfirmedImportantupdated 6sem

≈ 15sSpeed

The fact

Attackers perform reconnaissance, resource deletion, and credential theft.

Guidance is provided to bolster cloud infrastructure defenses.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on September 25, 2026