Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

This Microsoft Security Blog collection highlights identity and cloud security updates and active threat intelligence. Key items: Microsoft Entra ID now makes passkeys the default sign-in method and introduces a new SMS/voice authentication model with guidance to prepare; Microsoft’s Secure Future Initiative (SFI) progress and AI-speed hardening of cloud services; a detailed analysis of GigaWiper, a destructive backdoor built from multiple malware families with detection and mitigation guidance; emerging risks including AI-agent (MCP) tool poisoning and recommendations to defend AI-driven tool