Authentication - 1

2026 (4)

September (2)

github: Require proof of presence for high-impact actions

GitHub

2026-09-24

GitHub Enterprise Cloud now supports requiring proof of presence before members perform high-impact actions. This adds an interactive re-authentication or MFA challenge on top of the existing sudo-style control.

github: npm extends recovery-code security holds to all accounts

GitHub

2026-09-09

npm now applies a 72-hour security hold to any account after a successful recovery-code sign-in. The hold was previously limited to high-impact accounts.

July (2)

security: Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Security Blog

2026-07-13

Microsoft Entra ID now uses passkeys as the default sign-in method and introduces a new authentication model for SMS and voice. The post also points users to preparation guidance for the change.

github: Copilot CLI no longer needs a personal access token in GitHub Actions

GitHub

2026-07-02

GitHub Copilot CLI can now run in GitHub Actions with the built-in GITHUB_TOKEN. A personal access token is no longer required for this workflow.