Intune Remote Help Governance: Quick Assist, RMM and WinRM
Intune Remote Help governance after the Teams helpdesk campaign — RBAC, Conditional Access, and WinRM hardening that close the remote-access gap.
Read article →
Tag
Identity
14 articles
AI Agent Cyber Attacks: What the Unit 42 Case Changes
AI agent cyber attacks compressed an enterprise intrusion into under 10 hours. Rebuild Entra, GitHub and Key Vault containment so every step fires at once.
Read article →
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation detection: the kill chain, KQL hunting queries and the settings that stop one approved remote session becoming domain access.
Read article →
gMSA, dMSA and the Service Account Problem Nobody Solved
Group managed service accounts security rests on two things almost nobody audits: the password retrieval ACL and the forest KDS root key. Fix both.
Read article →
Entra ID Passkeys: Profiles, Synced Keys and a Rollout Plan
Plan your Entra ID passkey rollout: synced passkeys are supported, profiles control attestation and AAGUIDs, and passkeys are now the default sign-in.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
Securing Azure OpenAI for the Enterprise: Private Endpoints, Entra ID Auth, and Content Filtering
Azure OpenAI private endpoint security done right: lock down deployments with Private Link, Entra ID auth, and content filtering before production.
Read article →
Entra ID Privileged Identity Management: Rolling Out Just-in-Time Admin Access
Entra privileged identity management setup done right: configure JIT admin access, approval workflows, and alerts to eliminate standing privileges.
Read article →
Conditional Access Gap Analysis: Finding and Fixing Coverage Holes with What-If
Conditional access gap analysis: use Microsoft's What-If tool and PowerShell to find unprotected users, apps, and sign-in paths before attackers do.
Read article →
GitHub Actions OIDC to Azure: Passwordless Deployments Done Right
GitHub Actions OIDC with Azure eliminates stored secrets for good. Set up passwordless deployments with Workload Identity Federation in under 30 minutes.
Read article →