Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

This Microsoft Security Blog feed (May 2026) highlights product recognition and new tooling plus multiple high‑risk threat disclosures. Key security items: a multi‑stage Linux intrusion that began with an exposed F5 BIG‑IP appliance and pivoted to an internal Confluence server (credential theft, attempted Kerberos relay, lateral movement) with Microsoft Defender detection; a supply‑chain compromise of @antv npm packages delivering the Mini Shai‑Hulud payload to steal CI/CD secrets across GitHub, AWS, Kubernetes, Vault, npm, and 1Password; exposure of Fox Tempest, a malware‑signing‑as‑a‑service