identity security

Microsoft’s relentless focus on AI innovation now comes with a formidable security upgrade as the company unveils a series of new identity protection threat alerts and enhanced data governance capabilities across its AI platforms. These measures arrive amid soaring enterprise adoption of...

Azure Managed Identities (MIs) have revolutionized the way applications authenticate to Azure services by eliminating the need for developers to manage credentials directly. This innovation enhances security by reducing the risk of credential leakage. However, recent research has illuminated...

Delegated Managed Service Accounts (dMSAs), unveiled with Windows Server 2025, represent a significant evolution in Microsoft’s approach to service account security. At their core, dMSAs are intended to solve long-standing operational challenges for enterprise IT while closing off familiar...

Microsoft’s Secure Future Initiative (SFI) represents the company’s most ambitious and transparent push yet to move Zero Trust security from theory to ubiquitous, real-world practice. For those charting the latest evolutions in enterprise security—Windows enthusiasts, IT professionals, business...

In an era where digital security is paramount, Microsoft has been at the forefront of pioneering passwordless authentication methods to enhance user experience and bolster security. Traditional passwords, often susceptible to breaches and phishing attacks, are gradually being replaced by more...

A new development in the realm of cloud security threats has emerged, offering threat actors a novel way to obtain Microsoft Entra (formerly Azure Active Directory) refresh tokens from compromised endpoints, potentially bypassing even robust multi-factor authentication (MFA) mechanisms. This...

Microsoft's security landscape has reached a new milestone, with the BeyondTrust 2025 Microsoft Vulnerabilities Report documenting a record 1,360 vulnerabilities in 2024—a significant 11% increase from the previous peak in 2022. Key Findings from the 2025 Report: Elevation of Privilege (EoP)...

Microsoft is continuing its evolution of cloud-based identity management with the unveiling of OpenID Connect (OIDC) identity provider support for Entra External ID—a move poised to fundamentally reshape the way organizations blend security, scalability, and user experience in authentication...

Here is a summary of the recognition Trustwave received at the 2025 SC Awards, specifically for its Managed Security Service: Trustwave: Best Managed Security Service – SC Awards 2025 Awarded For: Managed Extended Detection and Response (MXDR) for Microsoft Target Clients: Organizations using...

Netwrix has recently unveiled significant enhancements to its 1Secure SaaS platform, introducing a new Data Security Posture Management (DSPM) solution tailored for Microsoft 365 environments. This development aims to bolster identity and data security by providing organizations with advanced...

Identity-based cyberattacks have rapidly emerged as one of the most pressing security challenges facing organizations in 2024 and beyond. As digital transformation accelerates, shifting workforces to remote and hybrid models and driving deeper cloud adoption, the boundaries that once defined...

In recent weeks, Microsoft 365 users have found themselves in the crosshairs of a sophisticated business email compromise (BEC) campaign that exploits the cloud service’s very reputation for trust and reliability. Rather than launching the usual barrage of phishing emails filled with tyrannical...

Microsoft’s April 2025 Patch Sets New Security Benchmarks for Windows 11 and Windows Server Microsoft’s release cycle rarely passes without scrutiny—but its April 2025 batch of updates is proving especially consequential. With Patch Tuesday’s KB5055523 update targeting Windows 11 version 24H2...

Microsoft’s continued expansion of its security ecosystem underscores just how essential, and complex, defending modern businesses has become. With the recent announcement that Microsoft 365 E5 Security is now available as an add-on for Microsoft 365 Business Premium customers, the company is...

Business Premium Elevates Security with New E5 Add-On In today’s cybersecurity climate, even small and mid-sized businesses can no longer afford to settle for basic protection. Microsoft 365 has responded by unveiling a game-changing E5 Security add-on designed exclusively for Business Premium...

Russian threat actors have once again raised the bar for cyber espionage, turning attention toward OAuth 2.0 authentication flows in Microsoft 365, hijacking accounts connected to Ukraine and human rights organizations. Their tactics, as uncovered by cybersecurity firm Volexity, fit into a...

If you’ve already started mentally composing your next big idea in Outlook, you might want to hit “Save as Draft” for a moment—there’s a new cyberattack in town, and it’s got your Microsoft 365 credentials written all over it... possibly in Cyrillic. A New Breed of Phishing: Sophisticated Social...

There’s a certain poetic irony in the fact that OAuth 2.0—a framework specifically engineered to keep our digital lives safe from password theft—is now being bent and twisted by Russian hackers to hijack entire Microsoft 365 accounts. If that isn’t progress in the field of offensive...

Windows users and IT professionals need to take extra caution as attackers continuously refine their phishing playbook. Recent reports reveal that sophisticated adversaries are leveraging vulnerabilities in OAuth 2.0 redirection flows to target Microsoft 365 environments. In these OAuth-themed...

With more than 600 million attacks hammering away at Microsoft Entra ID every single day—a figure that might keep even the most caffeine-fortified security admin up at night—it seems only fitting that Veeam has decided to grab the digital bull by the binary horns with its just-launched SaaS...