https://cybertoolchain.io/tools/microsoft-entra New releases and features in Microsoft Entra, tracked by The Cyber Toolchain. en Tue, 04 Aug 2026 18:30:00 GMT https://www.microsoft.com/en-us/security/blog/2026/08/04/advance-zero-trust-for-ai-new-tools-and-guidance-to-secure-ai-agents-and-devsecops/ https://www.microsoft.com/en-us/security/blog/2026/08/04/advance-zero-trust-for-ai-new-tools-and-guidance-to-secure-ai-agents-and-devsecops/ Tue, 04 Aug 2026 18:30:00 GMT Zero Trust Assessment gains new AI, Security Operations, and Infrastructure pillars for broader posture coverage. • Adds AI, Security Operations, and Infrastructure pillars to the Zero Trust Assessment, expanding automated posture evaluation beyond the existing Identity, Devices, Network, and Data pillars. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-entra https://www.microsoft.com/en-us/security/blog/2026/07/30/whats-new-in-microsoft-security-july-2026/ https://www.microsoft.com/en-us/security/blog/2026/07/30/whats-new-in-microsoft-security-july-2026/ Thu, 30 Jul 2026 16:00:00 GMT Microsoft Entra adds tenant governance, passkey-default auth, Defender SOC integration, and Purview network-layer data protection. • New Tenant Governance capability enables centralized discovery, management, and governance of tenants with cross-tenant delegated administration. • Passkeys are now the default authentication experience in Microsoft Entra ID, reducing reliance on SMS/voice and improving phishing-resistant security ahead of Microsoft telecom delivery retirement in 2027. • New interconnected Entra and Microsoft Defender experiences unify identity and SOC teams with shared user experience, RBAC, and agentic workflows. • Microsoft Purview integrates with Microsoft Entra Internet Access to extend data security controls to the network layer, enabling real-time protection of sensitive data shared with unmanaged cloud and AI apps. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-entra https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/ https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/ Mon, 13 Jul 2026 17:00:00 GMT Microsoft Entra ID makes passkeys the default MFA method and retires native SMS/voice auth by February 2027. • Starting September 1, 2026, users enabled for SMS or voice MFA are automatically enabled for passkeys and prompted to register one during their next MFA sign-in. • Supports synced passkeys (iCloud Keychain, Google Password Manager) and device-bound passkeys (Microsoft Authenticator, Entra passkey on Windows, FIDO2 security keys) as first-class authentication options. • New Microsoft Security Store partner marketplace enables organizations that still require SMS or voice to select, configure, and manage third-party telecom providers starting October 30, 2026. • Registration campaigns now available to prompt users to register a passkey at scale during MFA sign-in flows. Breaking changes: • On February 1, 2027, Microsoft-provided SMS and voice authentication is retired; users relying on these methods will be required to register a passkey before they can sign in, with no opt-out option. • After February 1, 2027, automatic passkey registration prompts will be enforced for all users in all tenants with no opt-out option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-entra