entra id news
2 stories
Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)
A recent report on August 26th highlighted the persistent challenge organizations face in effectively managing administrative privileges within Microsoft Entra ID, previously known as Azure Active Directory. The core issue revolves around the prevalence of excessive administrative accounts and the assignment of overly broad permissions, which significantly elevate an organization's security…
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
A new report indicates that malware can exploit Windows Hello for Business keys to maintain persistent access within Microsoft Entra ID environments. This technique allows malicious software operating within an active user session to perform silent authentication using the victim's existing Hello for Business key. The method reportedly bypasses typical biometric or PIN prompts, even on systems…