Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.town/notes/9or7j50exuof0zwa">Taggart :donor: (mttaggart@infosec.town)'s status on Monday, 22-Jan-2024 02:28:12 JST</a><a href="https://infosec.town/@mttaggart" title="mttaggart@infosec.town"><img src="https://gnusocial.jp/theme/gnusocialjp/default-avatar-stream.png" width="48" height="48" alt="Taggart :donor:" style="position: absolute; left: 0; top: 0;">Taggart :donor:</a></section><article><p>Dying at this being the next thing up in my to-read list. I think maybe some folks at Microsoft should take a gander <a href="https://www.microsoft.com/en-us/security/blog/2023/12/05/microsoft-incident-response-lessons-on-preventing-cloud-identity-compromise">www.microsoft.com/en-us/security/blog/2023/12/05/microsoft-incident-response-lessons-on-preventing-cloud-identity-compromise</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2616946#notice-5183888">In conversation</a><time datetime="2024-01-22T02:28:12+09:00" title="Monday, 22-Jan-2024 02:28:12 JST">about a year ago</time> <span>from <span><a href="https://infosec.town/notes/9or7j50exuof0zwa" rel="external" title="Sent from infosec.town via ActivityPub">infosec.town</a></span></span><a href="https://infosec.town/notes/9or7j50exuof0zwa">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.microsoft.com</div><h5><a href="https://www.microsoft.com/en-us/security/blog/2023/12/05/microsoft-incident-response-lessons-on-preventing-cloud-identity-compromise/">Microsoft Incident Response lessons on preventing cloud identity compromise | Microsoft Security Blog</a></h5><div> from <span>Joahnna Marie Hipolito</span></div></header><div>In real-world customer engagements, Microsoft Incident Response (Microsoft IR) sees combinations of issues and misconfigurations that could lead to attacker access to customers’ Microsoft Entra ID tenants. Effective protection of a customer’s Entra ID tenant is less challenging than protecting an Active Directory deployment but does require governance and monitoring. Reducing risk and exposure of your most privileged accounts plays a critical role in preventing or detecting attempts at tenant-wide compromise.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Taggart :donor: (mttaggart@infosec.town)'s status on Monday, 22-Jan-2024 02:28:12 JST Taggart :donor:
Dying at this being the next thing up in my to-read list. I think maybe some folks at Microsoft should take a gander www.microsoft.com/en-us/security/blog/2023/12/05/microsoft-incident-response-lessons-on-preventing-cloud-identity-compromise
In conversationabout a year ago from infosec.townpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.microsoft.com
  Microsoft Incident Response lessons on preventing cloud identity compromise | Microsoft Security Blog
  from Joahnna Marie Hipolito
  In real-world customer engagements, Microsoft Incident Response (Microsoft IR) sees combinations of issues and misconfigurations that could lead to attacker access to customers’ Microsoft Entra ID tenants. Effective protection of a customer’s Entra ID tenant is less challenging than protecting an Active Directory deployment but does require governance and monitoring. Reducing risk and exposure of your most privileged accounts plays a critical role in preventing or detecting attempts at tenant-wide compromise.

Public

Embed Notice

HTML Code

Corresponding Notice