What Storm-3168 Proves—and What It Does Not: Azure Permissions Powered a Seven-Minute Destruction Burst
Cover: A compromised workload identity can reach resources through existing roles. An independent safeguard can block a covered operation. Original conceptual artwork: Tech Trend Insight. Primary source . Miles Park IT engineer and technology analyst based in Virginia. About the author Microsoft’s September 25, 2026 Storm-3168 disclosure documents a fast, coordinated Azure intrusion built on compromised service principals and permissions the tenant had already granted. The strongest conclusion supported by the published telemetry is that the operation was automated or scripted . The report does not present the model traces, prompts, agent configuration, or self-narrating payloads needed to establish that a large language model selected the Azure actions. Microsoft Security Research’s report therefore supports an identity-and-authorization finding more strongly than an AI-attribution finding. Microsoft links Storm-3168 to JADEPUFFER and frames the broader campaign as AI-orchestrated...