Passkeys by default: what we're running into
Microsoft is ending its own delivery of SMS and voice authentication in Entra ID. Plenty has been written about it already and the timeline is well known by now, so I'll put that down briefly below …
AI against AI (part 2): What is UEBA in Microsoft Sentinel and why you need it
In my previous blog AI against AI, I described how attackers increasingly use artificial intelligence to stay under the radar. Phishing is getting smarter, attacks are becoming more subtle, and abuse …
How to Abuse Entra ID Dynamic Groups
Dynamic groups in Entra ID make access management easy. But a simple configuration error can give an attacker admin rights without anyone noticing. In this blog, I show you how this attack works, and …
AI against AI: The digital arms race in Cybersecurity
While you're reading this, cybercriminals are training AI models to break through your defenses. Attackers keep innovating, so security teams need to as well. In this blog, you'll discover how AI is …