Active Directory account lockouts happen when too many failed login attempts trigger security limits. Configure the Account ...

“Fundamentally, the issue that leads to Kerberoasting is bad passwords,” Tim Medin, the researcher who coined the term ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

A Dutch security researcher has published an indepth analysis of a critical vulnerability that could have allowed attackers ...

Entra ID gets new feature making it easier to backup and restore systems without the need for manual IT intervention.

While least privilege remains a fundamental security principle, DevOps teams consistently fail to apply it to non-human identities, like CI/CD pipelines and applications. This struggle stems from a ...

U.S. Senator Ron Wyden has sent a letter to the Federal Trade Commission (FTC) requesting the agency to investigate Microsoft ...

AttackIQ has updated the assessment template that emulates the various post-compromise Tactics, Techniques, and Procedures (TTPs) associated with the Chinese adversary Salt Typhoon and released a new ...