Content by Microsoft Security Research, Yossi Weizman and Tushar Mudi (1)

Microsoft Security Research, Yossi Weizman and Tushar Mudi detail Storm-3168 (JADEPUFFER) activity in Azure, showing how compromised service principals were used for reconnaissance, rapid resource deletion, and credential access. The post breaks down the observed sequence and provides concrete mitigations using Defender for Cloud, RBAC hardening, secret rotation, and recovery protections.