A cybersecurity assessment has uncovered a serious vulnerability involving Azure Active Directory (Azure AD). Resecurity’s HUNTER Team discovered that application credentials, specifically the ...

Twenty-five years ago, Microsoft introduced Active Directory (AD) as a core feature of Windows 2000 Server, revolutionizing enterprise identity management. Although Windows 2000 has long since been ...

Microsoft on Thursday announced that Azure AD Graph APIs will stop processing application requests after Feb. 1. "Our next big milestone starts February 1st, when existing applications will be ...

We are using Azure AD Connect to Sync to Entra, and want to use our HR system to update changes to fields such as title and department. We don't require any of these fields to be completed for any of ...

Eric is CEO of Strata Identity, an enterprise cloud identity expert, multi-exit serial entrepreneur and coauthor of the SAML SSO standard. One of the more challenging responsibilities for technology ...

Azure cross-tenant synchronization (CTS) was made generally available on May 30, 2023, and introduced a new attack surface on Microsoft Entra ID (formerly Azure Active Directory) where attackers can ...

Azure Active Directory (Azure AD), part of Microsoft Entra, is an enterprise identity service that provides single sign-on, multi factor authentication, and conditional access to guard against 99.9 ...

Microsoft said the corporate account of one of its engineers was hacked by a highly skilled threat actor that acquired a signing key used to hack dozens of Azure and Exchange accounts belonging to ...

A new proof of concept shows that attackers can use Azure AD CTS to leap to Microsoft and non-Microsoft application across tenants. Lateral movement techniques have been a critical component of ...