Another day of Cybersecurity
Turning an approved blueprint into a rogue cloud identity. Well, I do not need to exploit Microsoft Graph, nor do I need to register an obviously malicious OAuth application or ask an administrator to approve a new set of permissions. … Read the rest
If you’ve ever opened Entra ID logs in the middle of an analysis, you already know the pain. Thousands of JSON lines, timestamps in UTC, user IDs instead of names, and little to no context about what’s actually risky. It’s … Read the rest
Picture the classic castle and moat defense. For years, security teams believed that building high walls and deep moats could keep adversaries at bay. The logic seemed simple: if you fortify the perimeter, everything inside is safe. However, as attackers … Read the rest
Microsoft Entra ID now offers QR code authentication to enhance security and streamline user access. This feature aligns seamlessly with the Microsoft identity platform. Frontline workers often share mobile devices and must sign in repeatedly to access store or field … Read the rest
Token stealing is a severe threat in Office 365 and any cloud environment. Attackers use various technologies and tactics to steal tokens instead of passwords. With those stolen tokens, they will access critical resources and perform malicious activities in the … Read the rest
The Azure AD Incident Response methodology is a critical life-cycle, process, and tool that anyone using identities on Azure, Office 365, and third-party clouds can count on.
The Azure AD Incident Response explores how Azure AD investigates, manages, and responds … Read the rest
This blog post overviews the Azure AD Cloud Sync, some configurations, and first impressions from the field.
Do you remember the days with the first directory synchronization method? For example, the one with BPOS on the earlier days of Office … Read the rest
Recently, I have run into a scenario which OKTA is positioned as the IDaaS solution for all cloud applications and a specially for Azure AD and for Office 365.
This requires some integration with the existing identity services which might … Read the rest
