Identity security is the new pressure point for modern cyberattacks

Microsoft Security Blog posts (Mar 16–25, 2026) covering multiple high-impact topics: a Trivy supply‑chain compromise where attackers poisoned trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines and guidance for detecting, investigating, and defending against similar attacks; a Defender case study where predictive shielding prevented GPO‑based ransomware at scale; identity security as a growing pressure point and the value of unified identity/access strategies; new AI/agent security initiatives including Zero Trust for AI, agent governance guidance, a