Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

This Microsoft Security Blog feed highlights multiple high-risk threats and defensive developments. Notable incidents: a multi-stage Linux intrusion that began via an exposed F5 BIG‑IP appliance and pivoted to an internal Confluence server (including attempted Kerberos relay and lateral movement); Mini Shai Hulud — malicious code delivered via compromised @antv npm packages that executes on npm install to steal CI/CD secrets across GitHub, AWS, Kubernetes, Vault, npm, and 1Password; Fox Tempest — a malware‑signing‑as‑a‑service operation used to distribute malicious code and ransomware; and a S