JadePuffer: AI agent automates Azure attacks and destroys cloud resources

Reports describe JadePuffer, malware that chains AI-driven decisions with tool and API calls to perform recon, steal credentials, escalate privileges and destroy resources in Azure without a human approving each step. The individual techniques are not new, but the autonomous decision loop sharply compresses the time between initial access and destructive impact.

• JadePuffer automates recon, credential theft and privilege escalation in Azure
• The attack needs no human approval at each stage — the agent decides
• The autonomous loop shortens the window between initial access and resource destruction
• Defense comes down to tenant hygiene: least privilege, conditional access, deletion monitoring