Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms
2026-05-26T02:52:16Z•13dd28b6c4b995a6d2c62924e2b665c387d526e88a5bbb0cdd229187c7a2c09d
CI/CD secretsClarityConfluenceF5 BIG-IPForrester WaveFox TempestKerberos relayMini Shai-HuludRAMPARTStorm-2949cloud breachcredential theftidentity compromiselateral movementlinux intrusionmalware-signing-as-a-servicenpm compromiseopen source security toolssecurity updatessupply chainworkforce identity security
What happened
Collection of Microsoft Security Blog posts (May 18–22, 2026) covering product & research updates and multiple high-impact threat investigations. Key security findings include: a multi-stage Linux intrusion that began with an exposed F5 BIG-IP appliance and pivoted to an internal Confluence server (credential theft, attempted Kerberos relay, lateral movement); supply‑chain compromise of @antv npm packages deploying the Mini Shai-Hulud payload to steal CI/CD secrets across GitHub, AWS, Kubernetes, Vault, npm, and 1Password; a malware‑signing‑as‑a‑service (Fox Tempest) used to distribute signed恶
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 13dd28b6c4b995a6d2c62924e2b665c387d526e88a5bbb0cdd229187c7a2c09d
- Enrichment time
- 2026-05-26T02:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.