Microsoft Security Research has identified extensive cloud resource destruction activity linked to JADEPUFFER, which Microsoft tracks as Storm-3168. The activity used compromised service principals and performed cloud credential collection that could be used to facilitate future exfiltration. msft.it/6015a9lob Two compromised service principals divided discovery, destruction, and credential collection, with timing and overlapping token streams strongly indicating automated or scripted execution that included more than 100 storage account deletion attempts in about seven minutes. Discovered by Sysdig in July 2026, JADEPUFFER is reported to be the first documented agentic ransomware operation. These new findings expand publicly documented activity associated with Storm-3168 and indicate an evolution in the threat actor's cloud operations. Read the blog for analysis, Microsoft Defender detections, and mitigation guidance on protecting workload identities, revoking or rotating exposed credentials, and safeguarding backup and recovery resources.

‼️ You can commit code to a GitLab repo by emailing it. Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD. Incoming email also bypasses 2FA and IP restrictions. Read: thehackernews.com/2026/09/a-…

JUST IN: OpenAI warns recursive self-improvement could accelerate “beyond our collective ability to understand progress, assess risks, and maintain meaningful human oversight.”

For our next webinar, we dig into real-world AI security gaps across AWS, Azure, and GCP. Walk away with: 🔎 Common security gaps in AI deployments 🔒 Steps to lock down permissions, data access, and endpoints ✅ Actionable recommendations Register now! hubs.la/Q04y7Hzd0

I just really have no clue what Microsoft is doing anymore in terms of their security.. Just leaving this here. Nothing else to see.

Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family. It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.

BREAKING: The U.S. almost started a nuclear war with China after an AI-generated intelligence report falsely claimed a Chinese vessel was carrying nuclear weapons components, per CNN. The U.S. military was preparing to board the vessel. Armed personnel were ready, and military aircraft were already in the air. The report was produced by a special operations analyst using a chatbot, which incorrectly identified the vessel’s cargo. The AI-generated assessment was then formatted as a standard intelligence report and circulated across the military. Officials discovered the report was false shortly before the operation. One source told CNN it was “entirely false” and “almost started a war.”

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…