Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Semperis CEO Calls on Security Leaders to Defend Active Directory

semperis.com | blog | #cloud | #active-directory | #identity-security | #monitoring | #leadership | #hybrid-identity | #recovery

Summary

Semperis CEO Mickey Bresman on why AD is a keystone: 47% of organizations rely on it as their primary identity store, and cloud identities still sync back to on-prem AD—so compromise cascades. Tested recovery plans and AD monitoring are urged.
Published
Collected

original ↗

Related coverage

blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · semperis.com
Active Directory Security Best Practices
Twelve AD security best practices: minimize privileged users, secure admin accounts, modern password policies, disable SMBv1, restrict NTLM, plan recovery, use SID filtering, and monitor activity.
blog · semperis.com
New Azure AD Security Indicators Help Protect Hybrid Identity Environments
Semperis adds Azure AD threat indicators to Directory Services Protector, complementing on-prem AD monitoring; explains how cloud credential compromise escalates into on-prem privileges and details indicators like unused administrative units.
blog · semperis.com
Defending Hybrid Identity Environments Against Cyberattacks
Hybrid Identity Protection Conference panel: identity and endpoint security can no longer be managed separately, consolidation is the first step to taming hybrid complexity, and IAM is a practice—not something a single product provides.
blog · semperis.com
Retake Control of Attribute Sync to Azure AD
Azure AD Connect syncs 151 attributes by default and they can't be fully removed later; Semperis' Darren Mar-Elia recommends app, attribute, domain and OU filtering to limit exposure in Azure AD.
back