Frequency
3
occurrences
First Seen
May 19, 2026
Last Seen
September 10, 2026
Related Threat Clusters
-
Storm-2949 Cyberattack Targets Microsoft 365 and Azure Data
Microsoft has reported a significant cyberattack by the threat actor Storm-2949, which exploited Microsoft Entra ID accounts to conduct a large-scale data theft from Microsoft 365 and Azure environments. The attack…
6 articles · Updated May 19, 2026 -
Microsoft Launches Cloud Web Applications Threat Matrix
Microsoft has introduced a new threat matrix aligned with the MITRE ATT&CK framework to help organizations understand and mitigate threats to cloud-hosted web applications and serverless platforms. This matrix…
2 articles · Updated September 10, 2026
Recent Intelligence Reports
- Threat matrix: Mapping threats across cloud web applications — Redpacketsecurity · September 10, 2026
- Threat Matrix: Mapping threats across cloud web applications — Blogs.Microsoft · September 9, 2026
- Microsoft Details Storm — Thecyberexpress · May 19, 2026
Related Entities
Data Breach
Azure
Microsoft Azure
CWE-269 - Improper Privilege Management
Cwe-434 - Unrestricted Upload Of File With Dangerous Type
CWE-862 - Missing Authorization
CWE-94 - Code Injection
T1003 - OS Credential Dumping
T1021 - Remote Services
T1041 - Exfiltration Over C2 Channel
T1053 - Scheduled Task/Job
T1059.001 - PowerShell