Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hybrid Identity Protection: IAM Expert Daniel Stefaniak

semperis.com | blog | #cloud | #identity-security | #mfa | #application-security | #iam | #podcast | #azure-ad

Summary

HIP Podcast with IAM expert Daniel Stefaniak (Domino Data Lab), prompted by a finding that only 14% of developers prioritize app security: performance-over-security tradeoffs, MFA fatigue, and how Azure AD handles MFA.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Microsoft upends traditional password recommendations with significant new guidance
Microsoft's Password Guidance white paper, drawing on billions of Azure AD logins, advises dropping composition rules and periodic resets, keeping an 8-character minimum, and enforcing risk-based MFA.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · netspi.com
Multi-Factor Authentication: The Bare Minimum of IAM
Sectigo CTO Jason Soroko joins the Agent of Influence podcast to explain why MFA is the bare minimum of IAM, covering symmetric vs. asymmetric secrets and digital certificate best practices.
blog · semperis.com
Securing Hybrid Identity
Covers hybrid identity risks—SolarWinds-style attacks pivot from on-prem AD into Azure AD—and recommends MFA plus AD Pass-through Authentication over legacy ADFS to shrink the attack surface.
blog · semperis.com
New Azure AD Security Indicators Help Protect Hybrid Identity Environments
Semperis adds Azure AD threat indicators to Directory Services Protector, complementing on-prem AD monitoring; explains how cloud credential compromise escalates into on-prem privileges and details indicators like unused administrative units.
blog · semperis.com
Your Zero Trust Strategy Depends on Active Directory Integrity
Zero-trust and cloud IAM adoption (Azure AD, Okta) surged with remote work, but Semperis' Sean Deuby argues these strategies still depend on the integrity of on-premises Active Directory.
back