- Published
- Source
- Help Net Security
- Filed under
- Microsoft, Identity
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains how the group handled settings that can break systems, such as SMB signing, LDAP signing and Kerberos hardening, how changes were tested in a lab, and … More →…
Protecting sign-ins
- Phishing-resistant multi-factor authentication – passkeys or security keys – for administrators first.
- Block the old sign-in methods that skip MFA, and review who can grant apps access to your data.
- Alert on impossible travel, newly added MFA methods and unusual consent grants.
More helpNCSC: multi-factor authentication for online services (opens in a new tab)
MyCyberWay training
Microsoft SC-300 exam training
Most attacks start with an identity. Learn to defend it.
Tutor-led SC-300 preparation: Microsoft Entra ID, authentication and Conditional Access, workload and application identities, and identity governance with access reviews and Privileged Identity Management.
- Entra ID and hybrid identity
- Conditional Access and authentication
- Access reviews and PIM
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
