identity security

Midday on Wednesday, October 29, thousands of organizations and consumers worldwide experienced a major disruption that left Microsoft Azure, Microsoft 365 admin surfaces, and a wide range of dependent services intermittently unavailable or sluggish — an incident Microsoft attributed to a...

Microsoft engineers reported that they had begun restoring service after a global Azure outage triggered by an inadvertent configuration change in Azure Front Door (AFD), an incident that knocked Microsoft 365, the Azure Portal, Xbox/Minecraft sign‑ins and thousands of customer sites offline...

Microsoft’s cloud backbone faltered in mid‑afternoon UTC on October 29, 2025, producing a broad global outage that left Microsoft 365 portals, Xbox and Minecraft sign‑ins, and a raft of third‑party websites intermittently unreachable — a failure Microsoft attributed to problems in Azure Front...

Microsoft’s cloud backbone faltered on October 29, 2025, when an Azure outage traced to a suspected inadvertent configuration change in Azure Front Door (AFD) disrupted Microsoft 365, the Azure management portal, Xbox and Minecraft authentication, and a raft of third‑party sites — including...

Microsoft’s cloud fabric suffered a sharp, highly visible disruption that left thousands of users unable to reach the Azure Portal and knocked authentication-dependent services — from Microsoft 365 admin consoles to Xbox/Minecraft sign‑ins — offline for hours while engineers scrambled to...

A Microsoft cloud outage knocked large swathes of Microsoft 365, Azure management consoles and even gaming services offline for hours, with users worldwide reporting failed sign‑ins, blank admin portal blades, intermittent 502/504 gateway errors and disrupted Minecraft and Xbox authentication —...

Microsoft Copilot Studio agents can be weaponized to deliver highly convincing OAuth consent phishing that results in stolen tokens and persistent account access — a technique researchers have labelled “CoPhish” that leverages legitimate Microsoft-hosted agent pages to evade traditional...

When an industry veteran says “identity is the new perimeter,” they mean more than a slogan — they mean a strategic pivot that should already be reshaping every security program, architecture review, and boardroom risk discussion. In a recent interview reported by IT Brief New Zealand, James...

Keeper Security’s new native integration with Microsoft Sentinel promises to turn privileged credential telemetry into a real‑time detection stream for SOC teams — delivering prebuilt dashboards, analytics rules and a push connector that ingests Keeper event data into Sentinel workspaces in both...

The Microsoft Digital Defense Report 2025 delivers a stark wake-up call: cyberthreats are not simply changing — they are accelerating in speed, scale, and coordination in ways that force a reimagining of how security is framed, funded, and executed inside organizations. The most consequential...

Cayosoft’s new Guardian Protector is a free, always-on identity threat detection tool designed to provide continuous, real-time monitoring and alerts across hybrid Microsoft identity environments including Active Directory (AD) and Entra ID (formerly Azure AD), giving organizations a...

IT Researches Ltd’s latest press release positions the company as a one‑stop Microsoft modernization partner — promising turnkey migrations to Microsoft 365 and Office 2024, Windows 11 and Windows Server 2025 rollouts, SQL Server 2022 data modernisation, and hybrid Azure integrations designed to...

Windows administrators and identity teams should treat a newly disclosed Active Directory Federation Services (AD FS) vulnerability — tracked as CVE‑2025‑59258 — as a high‑priority operational item: Microsoft’s advisory describes an insertion of sensitive information into AD FS log files that...

Microsoft’s latest Secure Future Initiative (SFI) update moves beyond high-level commitments and delivers a practical, practitioner-focused set of patterns and practices aimed at turning Zero Trust theory into repeatable operational reality for networks, tenants, engineering systems, and...

Permiso’s new open-source tool P0LR Espresso is aimed squarely at the weakest link in cloud defense that most SOCs quietly tolerate: inconsistent, provider-specific log formats that slow investigations and obscure identity-based signals at the moment they matter most. The SiliconANGLE report...

Microsoft has quietly formalized what many IT teams have feared and many employees have quietly hoped for: the ability to run a consumer Microsoft 365 Copilot subscription inside work applications, enabling personal Copilot access to corporate documents when a user signs into an app with both a...

Ontinue’s announcement that its Posture Advisor Agent Core will be available through Microsoft’s new Security Store marks another tangible step in the rapid commercialization of security AI agents—promising easier deployment of identity-hardening tooling for Microsoft Entra ID tenants while...

Microsoft’s move away from a traditional VPN toward an identity-first Security Service Edge—branded internally as Global Secure Access (GSA) and externally as Microsoft Entra Internet Access and Microsoft Entra Private Access—represents a major operational and architectural shift for large...

A newly disclosed flaw in Microsoft Entra ID — tracked as CVE-2025-55241 — exposed a fragile seam in cloud identity where undocumented internal tokens and a legacy API’s weak validation combined to create a near‑universal tenant takeover vector; Microsoft has patched the defect, but the incident...

Security researcher Dirk‑jan Mollema’s discovery of two linked vulnerabilities in Microsoft’s Entra ID architecture exposed a failure mode that, by design, could have allowed an attacker with limited on‑premises access to gain near‑complete control over hybrid Microsoft environments — a chain...