How Microsoft Purview, Intune, and Conditional Access combine into Zero Trust for data: full access on trusted devices, web only on everything else, and proof that it works. This is the seventh part o...

はじめに あなたの組織では、情報システム部のメンバーへ、全員 グローバル管理者 のロールが永続的に付与されている状況になっているということは無いですか？ 管理操作を行うんだから当たり前じゃないか...と思われるかもしれませんが、これには大きなセキュリティリスクが潜んでいる...

はじめに GMOコネクトの永田です。 前回の記事で、Googleのマルチアカウントを実測しました。管理者と利用者のアカウントを同時に、しかもそれぞれ複数タブで開きたい、という要件が出発点です。Googleは「いま誰として動いているか」をどこにも保存しておらず、URLだけで...

Microsoft added a new privileged permission to the AI Administrator role in Entra ID. Users with the role can now grant admin consent to delegated permissions for applications and agents.

A sideloaded AppX package can abuse WWAHost.exe and WindowsRuntimeAccess="all" to open a real Microsoft login flow, capture OAuth authorization codes, and steal access plus refresh tokens even when MFA is completed. The article also shows that the abuse is detectable with a proxy rule for MSAppHost/3.0 traffic to non-Microsoft destinations and highlights Developer Mode as the key prerequisite. #WWAHost #WebAuthenticationBroker #MSAppHost #DeveloperMode #EntraID #MicrosoftOffice

Back in February I wrote about how to onboard passkeys safely with Temporary Access Pass, and in Passkeys enabled ≠ phishing-resistant I wrote about tightening Conditional Access afterwards. But I …

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027.

My first car had a key you could copy at the hardware store for about four dollars. No verification. No questions. If the key fit, the car assumed you belonged there. Modern key fobs are smarter. The ...