https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

🟦 Entra Tenant Governance | Find Configuration Drift

New preview lets admins detect tenant configuration drift natively across Entra and related services. 🔹

Define JSON baselines as configuration as code and create scheduled monitors. Monitors run every six hours and produce run summaries and detailed drift objects with property level diffs. Govern external tenants via B2B signals and role based templates from a single admin center. 💡

💡 Configuration as code baseline
🔍 Six hour monitor interval
⚖️ Cross tenant governance via B2B signals

▶︎ https://www.hubsite365.com/en-ww/pro-office-365/?id=78675908-1859-f111-bec7-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

#MICROSOFTENTRA #IDENTITYSECURITY #ZEROTRUST #CLOUDSECURITY

New tool library entry is up! 🐒

Someone on my SecOps team asked a simple question: "what does this group actually have access to?" Turns out the answer was "more than expected" and the script I hacked together to find out eventually grew into a proper access review tool.

Get-AzureRoleAssignments enumerates Azure role assignments across all subscriptions and spits out a CSV report. Great for those "wait, who has Owner on prod?" moments.

https://secopsmonkey.com/post/2026-05-23-azure-access-reviews/

#PowerShell #Entra #Azure #SecOps #MicrosoftEntra

Script Release: Azure Access Reviews

Background Continuing the theme of identity management, let’s take a look at [Get-AzureRoleAssignments]. The genesis of this tool was a seemingly simple request from my Security Operations team.

SecopsMonkey
⚠️ CRITICAL: CVE-2026-42901 in Microsoft Entra (CVSS 10) enables remote privilege escalation via origin validation error. Patch now to prevent full system compromise! Fix: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #MicrosoftEntra #Vulnerability #Cybersecurity

MFA werkt. Maar niet als de aanvaller nooit om je wachtwoord vraagt.

EvilTokens is een platform dat phishing als dienst aanbiedt en in vijf weken meer dan 340 Microsoft 365-organisaties in Europa en de VS heeft gecompromitteerd.

'Peter's Analyse'. Elke dag een nieuwe vraag die je kunt beantwoorden op https://www.ccinfo.nl

Heeft uw organisatie al gecontroleerd of sessietokens een maximale geldigheidsduur hebben?

#Cybersecurity #Phishing #MicrosoftEntra #ThreatIntelligence #Cyberbeveiliging

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Hackread - Cybersecurity News, Data Breaches, AI and More

Sicherheitslücke in Microsoft Entra ID: Agent-ID-Administratoren konnten beliebige Dienstprinzipale übernehmen

Angreifer konzentrieren sich in Microsoft-Entra-ID-Umgebungen zunehmend nicht mehr ausschließlich auf menschliche Administratorkonten. Stattdessen rücken Dienstidentitäten und Rollen der mittleren Verwaltungsebene in den Fokus.

https://www.all-about-security.de/sicherheitsluecke-in-microsoft-entra-id-agent-id-administratoren-konnten-beliebige-dienstprinzipale-uebernehmen/

#microsoft #entraid #agentid #MicrosoftEntra

Sicherheitslücke in Microsoft Entra ID: Agent-ID-Administratoren konnten beliebige Dienstprinzipale übernehmen

Eine Schwachstelle in Entra ID erlaubte Agent-ID-Admins, fremde Dienstprinzipale zu übernehmen. Microsoft hat den Fehler behoben.

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit

Microsoft Bolsters Entra with Passkey Support on Windows

Say goodbye to passwords! Microsoft is bolstering Entra with passkey support on Windows, allowing users to authenticate with a face scan, fingerprint, or PIN for added security and convenience.

https://osintsights.com/microsoft-bolsters-entra-with-passkey-support-on-windows?utm_source=mastodon&utm_medium=social

#PasskeySupport #WindowsHello #MicrosoftEntra #PasswordlessAuthentication #Mfa

Microsoft Bolsters Entra with Passkey Support on Windows

Discover how Microsoft Entra boosts security with passkey support on Windows, enabling passwordless authentication - learn more and secure your organization now with Entra today.

OSINTSights
Introducing Toolboxes in Foundry | Microsoft Foundry Blog

Explore the innovative Toolbox that centralizes tool management for AI agents, simplifying integration and reuse across frameworks. MCP Servers and More

Microsoft Foundry Blog

My GitHub has been gathering dust. Time to fix that. 🐒

Kicking off a new series where I'll be cleaning up and releasing scripts I've written over the years. First up: Update-UserAttributes, a PowerShell tool for bulk-updating Entra user objects.

https://secopsmonkey.com/post/2026-04-06-tool-library-announcement/

#PowerShell #Entra #SecOps #MicrosoftEntra

Tool Library Announcement

During a recent conversation someone pointed out that my Github profile is somewhat dusty. Afterwards I took a public view and dang, they’re absolutely right. Nearly all of my recent work has been restricted to private repos or owned by my employers.

SecopsMonkey