{
 "id": "AIR-2026-0354",
 "slug": "storm-2139-azure-openai-guardrail-bypass",
 "title": "Storm-2139 Azure OpenAI Guardrail Bypass",
 "summary": "Threat actors used stolen credentials and custom tooling to bypass safety guardrails on Azure OpenAI Services. The operation generated illicit and harmful synthetic content, prompting Microsoft intervention.",
 "type": "attack_on_ai",
 "categories": [
  "jailbreak"
 ],
 "severity": 3,
 "targets": [
  "Microsoft"
 ],
 "products": [
  "Azure OpenAI Services"
 ],
 "incident_date": "2024-12",
 "incident_date_precision": "month",
 "first_reported": "2026-06-30",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0057",
   "publisher": "MITRE ATLAS",
   "title": "Storm-2139 Azure OpenAI Guardrail Bypass",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://blogs.microsoft.com/on-the-issues/2025/01/10/taking-legal-action-to-protect-the-public-from-abusive-ai-generated-content",
   "publisher": "Microsoft Security",
   "title": "Taking legal action to protect the public from abusive AI-generated content",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://blogs.microsoft.com/on-the-issues/2025/02/27/disrupting-cybercrime-abusing-gen-ai",
   "publisher": "Microsoft Security",
   "title": "Disrupting a global cybercrime network abusing generative AI",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://news.microsoft.com/source/features/ai/how-microsoft-is-taking-down-ai-hackers-who-create-harmful-images-of-celebrities-and-others",
   "publisher": "Microsoft Security",
   "title": "How Microsoft is taking down AI hackers who create harmful images of celebrities and others",
   "published_at": "2026-06-30"
  }
 ],
 "source_count": 4,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "storm-2139",
  "jailbreak",
  "azure-openai"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}
