HIP Conference 2021: Practical AD Security Fixes for Today and Identity Protection Trends for Tomorrow

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Six takeaways from HIP Conference 2021: the accelerating move to passwordless authentication (Accenture's path to ditching passwords by 2022), behavioral authentication insights, Windows Hello for Business, and scaling identity for the future.

Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.

SpecterOps argues identity risk now extends beyond Tier Zero, as attackers increasingly use legitimate credentials and trusted relationships to reach backups, regulated data, and other critical workloads.

Semperis introduces Migrator for Active Directory 2.0, an update aimed at helping organizations move Active Directory environments with confidence and greater operational control.

Final part of the CISA/NSA top-ten misconfigurations series from an AD perspective: misconfigured ACLs on shares, poor credential hygiene, and unrestricted code execution, with IOEs and IOCs.