Hot Topics

Azure Active Directory

Microsoft Entra ID: The Complete Guide to Conditional Access Policies

Microsoft Entra ID: The Complete Guide to Conditional Access Policies

| | Azure Active Directory, EntraID, identity management, Identity-First Security, research, security, Technical
Here it is – everything you need to know about using Entra ID’s Conditional Access policies to boost your identity security posture. Microsoft Entra ID (formerly Azure Active Directory) is Microsoft’s cloud-based ...
Rezonate

US State Government Network Breach: Ex-Employee Logins Used

| | Azure Active Directory, Cybersecurity Incident, Cybersecurity Measures, Cybersecurity News, cybersecurity response, Ex-Employee Credentials, insider threats, Multi-Factor Authentication (MFA), Network Security, Privileged Accounts, State Government Breach
In a recent disclosure by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), a state government organization fell victim to a cyber breach facilitated by the misuse of ex-employee credentials. The US ...
TuxCare
Satya Nadella, with caption quote: “Culture of toxic obfuscation”

Microsoft is a “Strategic Problem in the Security Space,” Says CEO

| | Amit Yoran, azure, Azure Active Directory, Azure AD, Azure security, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, SB Blogwatch, Tenable
Fist of FAIL: Tenable CEO Amit Yoran has had enough—and he’s not gonna take it anymore. Satya Nadella (pictured) can’t be happy ...
Security Boulevard
Satya Nadella and President Xi Jinping

‘China’ Azure Breach: MUCH Worse Than Microsoft Said

| | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, OpenID, Outlook.com, SB Blogwatch, Storm-0558, Wiz
Storm-0558 Breaks: Satya and Pooh, sitting in a tree, K.I.S.S.I.N.G ...
Security Boulevard
A PRC flag flies atop a metal flagpole

China Breaches Microsoft Cloud — Spied on US Govt. Email

| | Active Directory, Authentication, Azure Active Directory, Azure AD, Exchange, Microsoft, Outlook.com, SB Blogwatch, Storm-0558
Storm-0558 Brewing: Multiple Microsoft failures cause data leaks at State and Commerce depts., plus 23 other orgs ...
Security Boulevard
Azure Privilege Escalation via Azure API Permissions Abuse

Azure Privilege Escalation via Azure API Permissions Abuse

| | azure, Azure Active Directory, azure-app-service, cloud computing, security
Intro and Prior WorkMicrosoft’s Azure is a complicated system of principals, securable objects, and the various ways access is granted to those objects. Some privileged actions are tightly controlled by Azure AD roles, ...
Posts By SpecterOps Team Members - Medium

Protecting BYOPC corporate access using conditional access

| | Azure Active Directory, byod, BYOPC, Conditional Access
The advent of the Bring your own PC (BYOPC) era This has got to be the most popular phrase in IT blogs in the past year, but yeah, we noticed – 2020 ...
Blog – Hysolate