Entra Hardening Tip #9 🔐 Don’t use client secrets for app authentication. Use this decision tree when a developer or vendor asks for an app registration to be created in your tenant. 👇 1/14

Show Post

Seeing new attributes pop-up is a strong signal that something is brewing in Entra ID. Ever wish this could be surfaced in an automated way? Enter changes.entra.ms - An automated system that scrapes #Entra for changes on a daily basis. #EntraID #infosec #mvpbuzz

Show Post

MCP auth for enterprise is confusing and most of the confusion comes down to one thing: mixing up agent identity and MCP authentication. It’s incredibly easy to blur the lines between agent identity and MCP authentication, which is exactly where things can get messy for an architecture team. 1/7

Show Post

#ConsentFix is a great way for attackers to work around some protective layers but not all. @naunheim.cloud , @cbrhh.bsky.social and I wrote a blog post on detection and mitigations. Hope you find it useful and can adapt it to your environment. www.glueckkanja.com/de/posts/202...

Show Post

Get ready, folks. 🌟 You’re about to witness ONE. BIG. BEAUTIFUL. ABSURDLY. EPIC. THREAD. 🧵🔥 Some say this might be the MOST EPIC and MOST RIDICULOUSLY LONG identity thread ever written 📗 Bookmark this Honestly… the cover image alone deserves a like + retweet DO IT 😂

Show Post