Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

This collection of Microsoft Security Blog posts highlights multiple high-risk incidents and defensive capabilities. Key incidents include a multi-stage Linux intrusion that began with an exposed F5 BIG‑IP appliance and pivoted to an internal Confluence server (Kerberos relay attempts, credential theft, lateral movement), supply‑chain compromise of @antv npm packages delivering the Mini Shai‑Hulud payload to steal CI/CD and cloud credentials, and Fox Tempest — a malware‑signing‑as‑a‑service used to distribute malicious code (including ransomware). Another report details Storm‑2949 turning a 
m