REPORTED DEVELOPMENT
Microsoft Security Research reported the Storm-3168 case, in which compromised service principals were used in highly automated cloud operations with permissions already assigned to those identities.
Microsoft observed more than 150 destructive or credential-related operations over approximately 35 minutes, including more than 100 attempted storage-account deletions during a seven-minute period. Some actions were prevented by independent protections such as resource locks and deletion controls.
The reported telemetry should not be interpreted as proof that an autonomous AI agent independently chose every observed operation.
WHY IT MATTERS TO THE MARKET
Machine identities and pre-existing authorisations can amplify the speed and scale of harmful actions. Least privilege, independent deletion protection, attribution and recovery procedures remain essential even where AI is not the direct decision-maker.