Curated security research, vulnerabilities, advisories and tools for practitioners.

#semperis

Security coverage tagged semperis.

1.

Introducing Migrator 2.0: Move Active Directory with Confidence

blog | 2026-09-09 15:35 | semperis.com | original ↗ | #active-directory | #identity-security | #migration

2.

How the Five Eyes AI Warning Changes Board Thinking About Cyber Recovery and Resilience

blog | 2026-08-04 17:20 | semperis.com | original ↗ | #ai-security | #ai-governance | #incident-response

3.

Checklist: Prepare Your Identity Fabric for the Agentic Era

blog | 2026-07-30 19:28 | semperis.com | original ↗ | #ai-security | #agentic-ai | #ai-governance

4.

AD Group Risks: Hidden Dangers in Backup Operators

blog | 2026-07-28 16:40 | semperis.com | original ↗ | #active-directory | #backup-security | #privilege-escalation

5.

Midnight in the War Room: The CISOs’ Challenge Comes to the Screen

blog | 2026-07-23 17:32 | semperis.com | original ↗ | #incident-response | #black-hat | #security-culture

6.

The Minimum Viable Company Part 3: Enabling Visibility, Control, and Operational Resilience

blog | 2026-07-21 22:28 | semperis.com | original ↗ | #incident-response | #active-directory | #cyber-resilience

7.

Practice Checkpoint 3: Registering an Agent—With and Without Agent ID

blog | 2026-07-10 20:00 | semperis.com | original ↗ | #agentic-ai | #developer-security | #identity-security

8.

Windows Privilege Abuse: How Attackers Escalate from Accounts with Dangerous Rights to Active Directory Compromise

research | 2026-07-06 18:15 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #identity-security

9.

Practice Checkpoint 1: Building Agent ID with MS Graph

blog | 2026-06-30 22:59 | semperis.com | original ↗ | #agentic-ai | #active-directory | #entra-id

10.

Agent ID: Understanding Microsoft’s Agent Identity Platform

blog | 2026-06-30 22:45 | semperis.com | original ↗ | #ai-security | #microsoft | #identity-security

11.

The Taxonomy of Workload Identities in Entra ID: Service Principals, Enterprise Applications, and Other Forms of Organized Confusion

blog | 2026-06-27 01:41 | semperis.com | original ↗ | #agentic-ai | #active-directory | #entra-id

12.

Meet Entra ID Agent Identities (BTW: They’re Not People)

blog | 2026-06-27 01:35 | semperis.com | original ↗ | #agentic-ai | #active-directory | #identity-security

13.

Understanding and Preventing Entra ID Agent Identity Attacks: A Comprehensive Guide

blog | 2026-06-27 01:23 | semperis.com | original ↗ | #agentic-ai | #active-directory | #identity-security

14.

Bringing Identity Context Into the Microsoft Security Workflow: Semperis’ Integration with Sentinel and Copilot

blog | 2026-06-23 12:19 | semperis.com | original ↗ | #cloud | #incident-response | #threat-detection

15.

11 Real-World Risks Hidden in Active Directory Migrations

blog | 2026-06-12 17:07 | semperis.com | original ↗ | #attack-chains | #active-directory | #privilege-escalation

16.

Zero Trust vs Breach Prevention: What’s Your Identity Security Objective?

blog | 2026-06-04 11:00 | semperis.com | original ↗ | #vulnerability-management | #active-directory | #entra-id

17.

RC4 and AD Migration: Uncover the Break Scenarios Hiding in Your Source Domain

blog | 2026-05-29 17:20 | semperis.com | original ↗ | #active-directory | #kerberos | #windows-security

18.

How to Secure Entra ID Workload Identities—Before AI Agent Sprawl Catches Up

blog | 2026-05-16 01:07 | semperis.com | original ↗ | #ai-security | #identity-security | #entra-id

19.

Identity Resilience Checklist: 6 Ways to Think Beyond Backup

blog | 2026-05-04 19:56 | semperis.com | original ↗ | #incident-response | #active-directory | #disaster-recovery

20.

What Good Looks Like: The Modern Model for Cyber Crisis Management

blog | 2026-05-01 20:11 | semperis.com | original ↗ | #incident-response | #cyber-resilience | #blue-team

21.

The Minimum Viable Company Part 2: Cyber Resilience Lessons from Beyond the Breach

blog | 2026-04-24 00:19 | semperis.com | original ↗ | #cloud | #cloud-security | #cyber-resilience

22.

Backups vs. Breaches: Entra ID Recovery Tools for Everyday Mistakes and Malicious Intrusions

blog | 2026-04-23 21:22 | semperis.com | original ↗ | #cloud-security | #incident-response | #identity-security

23.

The Minimum Viable Company Part 1: Why True Cyber Resilience Starts with Identity

blog | 2026-04-09 16:56 | semperis.com | original ↗ | #incident-response | #active-directory | #ransomware

24.

The Missing Layer in Cyber Incident Response: Crisis Orchestration

blog | 2026-04-02 17:24 | semperis.com | original ↗ | #incident-response | #cyber-resilience | #blue-team

25.

How to Audit Your Environment for RC4 Encryption

blog | 2026-03-31 00:40 | semperis.com | original ↗ | #remediation | #active-directory | #kerberos

26.

What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)

vulnerability | High | 2026-03-23 11:05 | CVE-2026-26119 | semperis.com | original ↗ | #vulnerability-research | #privilege-escalation | #windows-security

27.

Rethinking Cyber Crisis Management: Why Plans Fail — and What to Build Instead

blog | 2026-03-25 17:55 | semperis.com | original ↗ | #incident-response | #cyber-resilience | #blue-team

28.

When Is WinRM Over HTTP Secure?

blog | 2026-03-17 22:57 | semperis.com | original ↗ | #active-directory | #kerberos | #windows-security

29.

What You’re Missing: Proper LAN Manager Authentication Levels

blog | 2026-03-11 22:40 | semperis.com | original ↗ | #remediation | #active-directory | #privilege-escalation

30.

Hardening Entra ID Recovery and Identity Security Resilience

blog | 2026-02-24 18:57 | semperis.com | original ↗ | #incident-response | #identity-security | #entra-id