Should you upgrade to Active Directory 2016…or stay where you are?

Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.

Announcing a technical report on Intel Trust Domain Extensions, analyzing the confidential computing architecture's security model, implementation, and potential weaknesses.

A starter collection of virtualization security resources: hardening guides for Hyper-V, VMware vSphere, and Xen, plus references from DISA STIG, CSA, SANS, and CIS.

After a dull conference, the author concludes cloud pentesting is fundamentally the same as traditional testing: virtualized or shared, the underlying technology and security controls hardly change.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Why AD upgrades need a safety net: a 110-DC forest's migration to WS2016 shows schema upgrades remain irreversible and rollback isn't straightforward—so plan for full AD forest recovery.