JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

JADEPUFFER, the ransomware operation initially leveraging a Langflow vulnerability, has been linked to a new wave of destructive activity within Microsoft Azure. Despite numerous deletion attempts, resource locks and protection mechanisms prevented the complete destruction of some accounts, highlighting the effectiveness of independent safeguards. The attack demonstrates a growing trend of AI-orchestrated attacks, where threat actors use AI to coordinate complex post-compromise operations at scale.