Identity - 1

2026 (5)

March (2)

security: OAuth redirection abuse enables phishing and malware delivery

Microsoft Security Blog

2026-03-02

Microsoft reports attackers abusing OAuth redirect behavior to move users from legitimate sign-in pages to attacker-controlled sites, enabling phishing and malware delivery via trusted authentication flows.

github: Copilot metrics reports now return consistent usernames for Enterprise Managed Users

GitHub

2026-03-02

Copilot usage metrics reports now return a consistent `user_login` value for Enterprise Managed Users. This addresses cases where reports previously included a suffixed `user_login`, complicating analysis.

February (2)

security: Running OpenClaw safely: identity, isolation, and runtime risk

Microsoft Security Blog

2026-02-19

Microsoft Security Blog outlines risks of self-hosted agent runtimes (like OpenClaw) that execute untrusted input while holding long-lived credentials, creating compounded supply-chain exposure. It emphasizes governance plus identity controls and runtime isolation to reduce credential and execution risk in enterprise deployments.

github: Show profile names (first and last name) alongside user handles

GitHub

2026-02-13

GitHub now lets enterprise and organization admins choose whether to display users’ profile names (first and last) alongside their handles across the enterprise UI.

January (1)

security: Four priorities for AI-powered identity and network access security in 2026

Microsoft Security Blog

2026-01-20

The Microsoft Security Blog post outlines four key identity and network access priorities for 2026, aimed at strengthening an organization’s identity security baseline by leveraging AI and modern access controls.

2025 (3)

December (1)

security: Imposter for hire: How fake people can gain very real access

Microsoft Security Blog

2025-12-11

The Microsoft Security Blog post warns that 'fake employees'—synthetic or forged identities created to look like legitimate workers—are an emerging threat that can infiltrate organizations and obtain real access. It outlines common ways these imposters gain entry through onboarding gaps, stolen or fabricated credentials, and social engineering, and recommends operational and technical controls to reduce risk.

November (2)

azure: [In preview] Public Preview: Microsoft Foundry Control Plane & Entra Agent ID

Azure Updates

2025-11-18

Microsoft has announced a public preview of Microsoft Foundry Control Plane and Entra Agent ID, a unified platform for enterprise AI agent observability, security, and governance. The Control Plane combines identity, monitoring, and compliance capabilities to provide centralized control, deep observability, and regulatory alignment for AI agents.

azure: [In preview] Public Preview: Entra-only identities support with Azure Files SMB

Azure Updates

2025-11-18

Azure Files now offers Entra-only identities in public preview, providing a cloud-native authentication option for SMB file share access using Microsoft Entra Kerberos so customers can retire on-premises domain controllers.