BREAKING: OpenAI & Anthropic are reportedly investigating “tens of thousands” of incidents where rogue AI agents took potentially problematic actions.

Microsoft Security Research has identified extensive cloud resource destruction activity linked to JADEPUFFER, which Microsoft tracks as Storm-3168. The activity used compromised service principals and performed cloud credential collection that could be used to facilitate future exfiltration. msft.it/6015a9lob Two compromised service principals divided discovery, destruction, and credential collection, with timing and overlapping token streams strongly indicating automated or scripted execution that included more than 100 storage account deletion attempts in about seven minutes. Discovered by Sysdig in July 2026, JADEPUFFER is reported to be the first documented agentic ransomware operation. These new findings expand publicly documented activity associated with Storm-3168 and indicate an evolution in the threat actor's cloud operations. Read the blog for analysis, Microsoft Defender detections, and mitigation guidance on protecting workload identities, revoking or rotating exposed credentials, and safeguarding backup and recovery resources.

‼️ You can commit code to a GitLab repo by emailing it. Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD. Incoming email also bypasses 2FA and IP restrictions. Read: thehackernews.com/2026/09/a-…

JUST IN: OpenAI warns recursive self-improvement could accelerate “beyond our collective ability to understand progress, assess risks, and maintain meaningful human oversight.”

For our next webinar, we dig into real-world AI security gaps across AWS, Azure, and GCP. Walk away with: 🔎 Common security gaps in AI deployments 🔒 Steps to lock down permissions, data access, and endpoints ✅ Actionable recommendations Register now! hubs.la/Q04y7Hzd0

I just really have no clue what Microsoft is doing anymore in terms of their security.. Just leaving this here. Nothing else to see.