Eric Woodruff on identity security, the challenges surrounding identity platforms, non-human identities, and AI.

Exploring the Entra Usage & Insights report on MFA usage, and the issues with the reports lack of accuracy, as well as a workaround.

Learn how Azure Load Testing's JMeter JMX and Locust support enables code execution, metadata queries, reverse shells, and Key Vault secret extraction vulnerabilities.

This blog is about all things identity and identity adjacent. Right now, the focus is primarily on Azure AD and the Microsoft identity world, but it could have potential to expand in the future.

Think nOAuth abuse is old news? We wish. Our recent testing shows that nearly 10% of apps in the Microsoft Entra Gallery remain vulnerable.

Hi.

Take this survey powered by surveymonkey.com. Create your own surveys for free.

A look at a recent spam scam email that I received, trying to understand what mechanism the attacker is using to deliver the scam email.

Zuckerberg seems to enjoy the spam that has taken over his flagship product.

Examining Entra ID sign-in and graph activity logs to determine what type of credentials your ISVs use in their multi-tenant applications.

Use this page to search for the Microsoft community on bluesky.ms.

Alt: a woman in a tie dye shirt is dancing in front of an elite daily advertisement

YouTube video by Thomas Naunheim

Recent Semperis security research findings reveal a past potential for privilege elevation in Entra ID. Learn more in this article.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers...

If you believe that every change to Entra ID is thoroughly audited, you may want to give this article a look through.