Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

Collection of Microsoft Security Blog posts (May 18–22, 2026) highlighting multiple high‑risk threats and defensive updates. Key items: a multi‑stage Linux intrusion that began with an exposed F5 BIG‑IP appliance and pivoted to an internal Confluence server (Kerberos relay attempts, lateral movement) with detection and remediation by Microsoft Defender; a supply‑chain compromise of @antv npm packages distributing the Mini Shai‑Hulud payload to steal CI/CD secrets across GitHub, AWS, Kubernetes, Vault, npm, and 1Password; exposure of Fox Tempest, a malware‑signing‑as‑a‑service operation used by