How Storm-2949 turned a compromised identity into a cloud-wide breach

Microsoft Security Blog posts covering multiple high-risk topics: Storm-2949 used stolen credentials to escalate an identity compromise into a cloud-wide breach and large-scale data theft without malware; Dirty Frag — a new Linux kernel local privilege escalation affecting networking (esp4, esp6, rxrpc) — is being exploited post-compromise; Kazuar is a modular P2P nation‑state botnet enabling persistent covert access. Additional themes include exploitable misconfigurations in cloud-native AI apps (exposed UIs, weak auth, risky defaults leading to RCE/data leaks), stealthy intrusions via third‑