Follow the latest coverage, related explainers and connected technology stories.
A practical measurement of a software agent that used a user’s Azure credential showed that the system logged its actions under the human’s own name, with permissions ranging from two to 107 permissions across two production stores. The case reveals that access scope and auditing may depend more on the connection path and group membership than on the identity displayed in the log.
Huntress observed a 155-fold increase in password-spraying attacks during the first half of 2026, including a campaign targeting Azure CLI that recorded more than 81 million login attempts over two weeks. The campaign exploited an outdated authentication flow that some MFA policies did not cover, resulting in the compromise of 78 accounts.