securitytabs

Daily briefing · Atom feed

Friday, September 25, 2026

Stories ranked by how many independent outlets covered them, then by active exploitation.

16stories
10sources reporting
0newly known exploited
0new critical CVEs

Top stories

Most covered

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders.

Microsoft Security Blog26d agoCloudAI

Coverage by topic

Stories in this window per security domain.