Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Retake Control of Attribute Sync to Azure AD

semperis.com | blog | #cloud | #data-exposure | #identity-security | #azure-ad | #hybrid-identity | #azure-ad-connect | #attribute-sync

Summary

Azure AD Connect syncs 151 attributes by default and they can't be fully removed later; Semperis' Darren Mar-Elia recommends app, attribute, domain and OU filtering to limit exposure in Azure AD.
Published
Collected

original ↗

Related coverage

blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
Securing Hybrid Identity
Covers hybrid identity risks—SolarWinds-style attacks pivot from on-prem AD into Azure AD—and recommends MFA plus AD Pass-through Authentication over legacy ADFS to shrink the attack surface.
blog · semperis.com
Hybrid Identity Protection with Dr. Nestori Synnimaa
AADInternals creator Dr. Nestori Synnimaa joins the HIP Podcast: every on-prem component in a hybrid AD configuration needs Tier 0 protection, and Azure AD sync compromise can expose credentials across both environments.
blog · semperis.com
Hybrid Identity Protection: IAM Expert Daniel Stefaniak
HIP Podcast with IAM expert Daniel Stefaniak (Domino Data Lab), prompted by a finding that only 14% of developers prioritize app security: performance-over-security tradeoffs, MFA fatigue, and how Azure AD handles MFA.
blog · semperis.com
New Azure AD Security Indicators Help Protect Hybrid Identity Environments
Semperis adds Azure AD threat indicators to Directory Services Protector, complementing on-prem AD monitoring; explains how cloud credential compromise escalates into on-prem privileges and details indicators like unused administrative units.
back