Severity: Informational

tenfold CE: Our free Identity Governance tool just got 2 new features

tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity.

Excerpt from the primary source: BleepingComputer

Who is affected

Small businesses · Enterprises

Affected technology: Microsoft 365

What you should do

No specific action is required at this time.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Original reporting

tenfold CE: Our free Identity Governance tool just got 2 new features BleepingComputer · bleepingcomputer.com · Oct 5, 2026 · Primary source
Severity: ElevatedAction: Be aware

Microsoft Disrupts EvilTokens Device Code Phishing Service

Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.

Severity: HighAction: Be aware

​​Beyond source code: A path to the keys to the kingdom

Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to defend their identities, pipelines, and cloud infrastructure.

Severity: HighAction: Be aware

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders.