In early June 2026, an AI-driven operator tracked as JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals to map a tenant, then made 100+ storage account deletion attempts in about seven minutes. Most succeeded. There was no malware and no exploit inside Azure.