Identity Governance
The latest Identity Governance coverage — news, analysis, and updates from the WindowsNews.AI desk.
CoPhish Attack: How Microsoft Copilot Studio Can Be Weaponized for OAuth Token Theft
Microsoft's Copilot Studio has become the latest vector for sophisticated phishing attacks, with security researchers at Datadog Security Labs uncovering a method they've dubbed "CoPhish" that...
Microsoft Entra ID Free: New No-Cost Identity Layer for Tenant Management
Microsoft has quietly introduced a significant addition to its identity and access management ecosystem with Microsoft Entra ID Free, a no-cost layer designed specifically for tenant ownership and...
Microsoft Agent Factory Blueprint: Revolutionizing Enterprise AI with Azure AI Foundry
Microsoft's "Agent Factory" blueprint is transforming the landscape of agentic AI by shifting it from fragmented experimental tools into a cohesive, enterprise-ready framework. Built on Azure AI...
Bonfy ACS v1.1 Aims to Lock Down Microsoft 365 AI Data Leaks in Real Time
Bonfy.AI shipped a major update to its Adaptive Content Security platform on September 18, 2025, planting deep hooks into Microsoft 365’s mail, SharePoint, identity, and governance layers. The...
AI Agents Get Corporate IDs: Inside Microsoft and Workday’s Landmark Integration
Enterprise AI agents are about to get their own set of corporate credentials. Microsoft and Workday have quietly stitched together a system that assigns verified, directory-backed identities to...
Microsoft's Access Review Agent Goes Live in Preview, Embedding AI Governance into Teams
Microsoft has shipped a public preview of its Access Review Agent, an AI-powered tool that aims to unclog one of the most tedious drains on identity teams: the manual access recertification process....
Palo Alto's Prisma SASE 4.0 Targets AI-Driven Browser Attacks and Rogue SaaS Agents
Palo Alto Networks has drawn a clear line in the SASE arms race. On September 4, 2025, the company launched Prisma SASE 4.0, a major platform refresh that frames the next phase of enterprise security...
Microsoft Inks $3 Billion AI Deal with U.S. Government: Free Copilot, Azure Discounts, and the Risks Agencies Can't Ignore
Microsoft and the U.S. General Services Administration have finalized a landmark OneGov agreement that arms federal agencies with deeply discounted—and in some cases, free—access to the...
Microsoft’s 1.3 Billion Agent Projection Sparks Urgent Security Overhaul with Entra Agent ID and MCP Governance
Microsoft expects more than 1.3 billion AI agents to be operating across enterprises by 2028—a staggering scale that demands a fundamental rethink of identity, access, and runtime security. The...
From Prompts to Process: Microsoft’s Agent Factory Powers Enterprise Automation in Azure AI Foundry
Microsoft is doubling down on agentic AI with a clear message: generative AI’s next frontier isn’t just answering questions—it’s completing complex, multi-step business processes...
New Golden dMSA Attack Bypasses Windows Server 2025 Security; Entra ID Flaw Escalates to Global Admin
Security researchers have unveiled two distinct but equally alarming identity-based attack paths that strike at the heart of enterprise Windows environments: a design flaw in Windows Server 2025’s...
Microsoft Entra ID Group Source of Authority: Revolutionizing Hybrid Identity Management
As organizations continue the relentless migration from on-premises infrastructure to cloud-first and hybrid environments, the need for modern, secure, and unified identity management only grows more...