Identity and infrastructure security for admins and security engineers defending Microsoft environments. Coverage runs from Entra ID hardening — Conditional Access gap analysis, Privileged Identity Management, passkeys, workload identity federation, and the retirement of SMS and voice MFA — through Zero Trust network design in Azure, Key Vault secret handling, certificate authority renewal, and detection engineering in Microsoft Sentinel and Defender XDR. Patch Tuesday analysis and advisories flag what to triage first. Tested against the product builds, KB numbers, and portal versions named in each article.
15 articlesEntra Connect 2.6.79.0 shipped security fixes but was recalled — install 2.6.84.0 instead. Same security fixes, plus a FIDO2 wizard sign-in preview.
Read article →Sentinel moves into the Defender portal by 31 March 2027. What merges, what breaks, the RBAC and licensing reality, and a sequenced migration plan.
Read article →- Azure Key Vault centralizes secret management with enterprise-grade security and access controls
Read article →Build a production-safe Azure AD conditional access setup: break-glass accounts, MFA baseline policies, report-only rollout, and Maester test coverage.
Read article →Plan a domain CA renewal deployment with zero downtime: backups, new-key vs same-key rollover, lab validation, and rollback-ready production cutover.
Read article →
