TrustSink is an attack technique that abuses Microsoft Entra ID’s federated trust model by using a rogue MFA provider to intercept user credentials during legitimate login attempts.

Internet-facing devices are an overlooked identity risk. Learn how attackers exploit edge systems to gain credentials and ...

Microsoft Entra Conditional Access is a Zero Trust policy engine that uses sign-in signals to automate access decisions for ...

Microsoft will enforce new CSP protections for Entra ID sign-ins in October, blocking unsupported scripts and some browser ...

Starting mid-October 2026, Microsoft will enforce stricter Content Security Policy (CSP) defenses within Entra ID sign-ins.

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.

When companies using Microsoft 365 introduce SASE, a discussion almost always arises: how to divide the controls between ...

Erfahren Sie, wie Sie die Zero-Trust-Architektur mit Zugriffsrichtlinien in Entra ID umsetzen und so Ihr Unternehmensnetzwerk effektiv schützen.

Microsoft is again urging Entra ID admins to move users from SMS and voice authentication to passkeys before the February 2027 retirement.

Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide, requiring organizations to migrate affected users before February 1, 2027.

In fünf Sessions lernen IT-Profis, wie sie ihre Microsoft-365-Umgebung effizient absichern. Von der Konfiguration über Defender bis zu Zero Trust.

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...