Microsoft says Storm-0501 is exploiting Entra ID and Azure to escalate privileges, implant backdoors, exfiltrate and destroy data, and extort victims.

Microsoft warned some of its Azure cloud computing customers that a flaw discovered by security researchers could have allowed hackers access to their data.

Microsoft has fixed a bug in its Azure Automation service that allowed an attacker on the service to access resources and data of other users.