Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...

In an incident observed in early June 2026, attackers used two compromised service principals application identities used to ...

The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.

Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service principals to delete 100+ ...

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal ...

Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage and ...

Microsoft has uncovered an Azure-focused destructive campaign tied to Storm-3168, also known as JADEPUFFER, in which ...

You're currently following this author! Click to unsubscribe from email alerts. Mark Zuckerberg's ambition to bring "personal superintelligence" to everyone may be ...

Xbox and Windows are now part of a new Devices and Consumer segment. Xbox and Windows are now part of a new Devices and Consumer segment. is a senior correspondent and author of Notepad, who has been ...

Microsoft will begin reporting Azure revenue in dollars for the first time, providing more clarity about its business that competes with Amazon Web Services. The company is trimming the number of ...

But a new study shows that work use cases make up less of the picture than AI companies claim. AI companies like Anthropic and OpenAI regularly publish reports on how people are using products like ...