Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why I’m Hanging Out With the Semperis Crew

semperis.com | blog | #cloud | #active-directory | #attack-surface | #opinion | #cloud-migration | #hybrid-identity | #identity-management

Summary

Chris Roberts rebuts the 'AD is dead' narrative: Active Directory still anchors hybrid identity, can't be replaced by identity vendors, and overlooked assets like printers remain hacker favorites.
Published
Collected

original ↗

Related coverage

blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
Why On-Premises Active Directory Still Matters in a Cloud-Connected World
AD is not becoming obsolete—it is evolving. Sean Deuby explains Microsoft's 'One AD' vision joining on-prem AD DS and Azure AD, and why the 93% of Fortune 1000 still running AD keeps it central.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
vulnerability · projectdiscovery.io
Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud
Elastic ran ~50,000 servers across AWS, Azure, and GCP and adopted ProjectDiscovery Cloud, scanning 14,500 external assets in under five minutes after outgrowing legacy scanners like BitSight.
vulnerability · netspi.com
XSS Using Active Directory Automatic Provisioning
Azure AD SCIM provisioning synced user names into a web app without output encoding, giving script injection via the firstName field and a path to steal credentials with an imported JS file.
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Cyber resilience is a whole-organization effort. Which roles a resilient org needs in place before the next identity crisis hits—and why HIP 2026 is worth a team trip.
back