JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

vulnerability

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

JADEPUFFER, the ransomware operation initially leveraging a Langflow vulnerability, has been linked to a new wave of destructive activity within Microsoft Azure. Despite numerous deletion attempts, resource locks and pro…

The Hacker News · Sep 28, 2026 CriticalCVSS 9.8KEVEPSS 100%

CVE-2025-3248 ransomware cloud service-principal

vulnerability

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Google Threat Intelligence Group (GTIG) found that the number of vulnerabilities disclosed and exploited increased significantly in 2026 compared to 2025, largely driven by ‘n-days’ rather than zero-day vulnerabilities.

SecurityWeek · Sep 30, 2026 CriticalCVSS 9.8KEVEPSS 91%

CVE-2026-1731 vulnerability ai n-day

threat-intel

ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)

Threat actors are leveraging a simple phishing campaign to distribute a tampered ScreenConnect client executable. The ScreenConnect client is preconfigured to call-back a test account operated by the attackers.

SANS Internet Storm Center · Oct 1, 2026 Info

phishing threat-intel remote-access

news.mlab.sh

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources