Topic hub

Identity Security

Coverage of authentication, authorization, access review, privileged access, and the infrastructure behind identity-led defense.

Authentication, access control, and identity hardening.

This topic sits inside Security and collects related stories in one crawlable archive.

2 published stories in this topic archive.

SecurityIdentity Security

Microsoft says device-code phishing has become a faster identity threat

Microsoft’s April 6, 2026 research says attackers are scaling device-code phishing with automation and AI-written lures, turning a niche OAuth trick into a more practical account-takeover path.

Aisha RahmanApr 20, 20263 min read

Risk, resilience, and the systems companies rely on.Read story

SecurityIdentity Security

Microsoft’s April hotpatch turned a Windows update bug into an identity warning

Microsoft’s April 19, 2026 out-of-band hotpatch fixed a domain-controller startup issue that followed the April 14 security update, underscoring how identity infrastructure changes can become availability risks before security teams have time to react.

Aisha RahmanApr 20, 20262 min read

Risk, resilience, and the systems companies rely on.Read story