In the past, many organizations chose to trust users and devices within their secure perimeters. This is no longer possible, with workers spread out geographically and needing access from multiple ...

Hybrid cloud identity and access management services add complexity and opportunity for attackers to network authentication processes, as recently demonstrated for Azure AD. It’s been common knowledge ...

Editor’s note: When originally published this article said that by using dynamic user identification (UID) generation, users might be assigned a different UID number each time they logged onto a ...

Kerberoasting is a common attack targeting Microsoft Active Directory, enabling attackers to compromise service accounts with low risk of detection. Because it manipulates legitimate accounts, it can ...

Securing Microsoft Active Directory (AD) involves dealing with a mixed bag of risks, ranging from misconfigurations to unpatched vulnerabilities. That's why many current cyber-attacks involve a breach ...

Microsoft this week announced a couple of changes coming to organizations that use its Exchange Online e-mail service. One of the changes will add "modern authentication" to a couple of client ...

Microsoft is upping the security on Azure with Active Authentication, a new service now in preview which allows enterprises to secure access to hosted applications such as Office 365 with two-factor ...

Microsoft's Active Directory authentication solution got notably skewered during a Feb. 23 U.S. Senate hearing on the SolarWinds Orion software hack. The hearing by the Senate Select Committee on ...