Matej Klemencic

Stop Flying Blind: Get Visibility into Your Entra ID Enterprise Applications The topic of Enterprise Applications in Entra ID is something that, not long ago, made me feel uncertain.

www.matej.guru/p/stop-flyin...

North Korea's Laptop Farm Scam: 'Something We'd Never Seen Before' Officials uncover how North Korean operatives used stolen identities and remote-controlled tech to infiltrate American companies and steal corporate data.

www.techrepublic.com/article/news...

Assume Breach: Securing MFA Registration in Entra ID Thanks for reading Another security blog...!

www.matej.guru/p/assume-bre...

Linking to page aka.ms/GetMicrosoftAuthenticator

🚨 PSA: FAKE Microsoft Authenticator apps are flooding the App Store & Play Store! ⚠️

Protect your users!

ONLY send them to the official download link 👇

Bookmark this! Update your user guides & intranet NOW. RT to spread the word!

#CyberSecurity #MFA

🧵↓

Botnet looks for quiet ways to try stolen logins in Microsoft 365 environments Researchers say a large botnet-driven campaign poses a threat to Microsoft 365 environments that still use an authentication process that the tech giant has been phasing out in recent years.

therecord.media/botnet-crede...

Entra ID Guest Accounts: Identify, Analyze, and Clean Up For a while, I had been manually running cmdlets to export guest account reports from Entra ID.

www.matej.guru/p/entra-id-g...

Protecting on-premises from Microsoft 365 attacks A few years ago, I came across a blog post titled Protecting Microsoft 365 from on-premises attacks, which resonated deeply with me.

Protecting on-premises from Microsoft 365 attacks
www.matej.guru/p/protecting...

www.span.eu/en/insights-...

Ransomware payments drop for first time in years following law enforcement disruptions Researchers at Chainalysis report that ransomware payments dropped in 2024, down approximately 35% from $1.25 billion to $812.55 million. Global law enforcement actions may have helped.

therecord.media/ransomware-p...

Securing Identities: 10 recommendations for building a stronger identity security posture | Microsoft Community Hub Attack strategies are constantly evolving, your identity security posture should too. Microsoft Defender for Identity is a core part of Microsoft Defender...

techcommunity.microsoft.com/blog/microso...

Windows Server 2025, security baseline | Microsoft Community Hub Microsoft is pleased to announce the release of the security baseline package for Windows Sever 2025! Please download the content from the Microsoft...

techcommunity.microsoft.com/blog/microso...

Microsoft Entra PowerShell module now generally available | Microsoft Community Hub Today, we’re thrilled to announce the general availability (GA) of the Microsoft Entra PowerShell module, a new scenario-focused PowerShell module designed...

techcommunity.microsoft.com/blog/microso...

Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub Hi all! Jerry here again to continue the AD hardening series.   This time I want to address the concept of least privilege as it applies to Active...

techcommunity.microsoft.com/blog/coreinf...

Enhancing Security with Entra PIM and Conditional Access Policy using Authentication Context | Microsoft Community Hub In today’s cybersecurity landscape, organizations face an ever-evolving set of threats targeting privileged accounts. These accounts often have elevated...

techcommunity.microsoft.com/blog/coreinf...

Employees Enter Sensitive Data Into GenAI Prompts Too Often The propensity for users to enter customer data, source code, employee benefits information, financial data, and more into ChatGPT, Copilot, and others is racking up real risk for enterprises.

www.darkreading.com/threat-intel...

Microsoft Ignite: Redefining email security with LLMs to tackle a new era of social engineering | Microsoft Community Hub Microsoft Defender for Office 365 now uses purpose-built Large Language Models (LLM) at scale to provide AI-powered email and collaboration security.

techcommunity.microsoft.com/blog/microso...

Does Desktop AI Come With a Side of Risk? AI is coming to a desktop near you — with Microsoft 365 Copilot, Google Gemini with Project Jarvis, and Apple Intelligence all arriving (or having arrived). But what are the risks?

www.darkreading.com/application-...

Monthly news - December 2024 | Microsoft Community Hub Microsoft Defender XDRMonthly newsDecember 2024 Edition This is our monthly "What's new" blog post, summarizing product updates and various...

techcommunity.microsoft.com/blog/microso...

New Windows zero-day exposes NTLM credentials, gets unofficial patch A new zero-day vulnerability has been discovered that allows attackers to capture NTLM credentials by simply tricking the target into viewing a malicious file in Windows Explorer.

www.bleepingcomputer.com/news/securit...

What's new in Microsoft Entra - November 2024 | Microsoft Community Hub The identity security landscape is advancing at an unprecedented pace. As global events and rapidly evolving AI reshape the cybersecurity environment,...

techcommunity.microsoft.com/blog/identit...

Zero Trust Assessment Tool is a fantastic way to show customers that zero trust is more than just enabling MFA and onboarding devices with Intune microsoft.github.io/zerotrustass...