Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

Microsoft Security Blog roundup (May 18–22, 2026): Microsoft named a Leader in Forrester’s Workforce Identity Security Platforms. Several incident reports and research posts detail active threats and defenses: a multi-stage Linux intrusion that began with an exposed F5 BIG‑IP appliance and pivoted to an internal Confluence server (Kerberos relay and lateral movement); Mini Shai Hulud npm supply‑chain malware that steals CI/CD secrets across GitHub, AWS, Kubernetes, Vault, npm, and 1Password during npm install; Fox Tempest, a malware‑signing‑as‑a‑service operation used to distribute malicious‑s