Podcasts about microsoft entra

Strengthen your security posture in Microsoft Entra by following prioritized Secure Score recommendations. Enforce MFA, block legacy authentication, and apply risk-based Conditional Access policies to reduce exposure from stale accounts and weak authentication methods. Use built-in tools for user, group, and device administration to detect and clean up identity sprawl—like unused credentials, inactive accounts, and expired apps—before they become vulnerabilities. Jeremy Chapman, Microsoft 365 Director, shares steps to clean up your directory, strengthen authentication, and improve overall identity security. ► QUICK LINKS:  00:00 - Microsoft Entra optimization 00:54 - New Recommendations tab 02:11 - Enforce multifactor authentication 03:21 - Block legacy authentication protocols 03:58 - Apply risk-based Conditional Access 04:44 - Identity sprawl 05:46 - Fix account sprawl 08:06 - Microsoft 365 group sprawl 09:36 - Devices 10:33 - Wrap up ► Link References Watch part one of our Microsoft Entra Beginner's Tutorial series at https://aka.ms/EntraBeginnerMechanics Check out https://aka.ms/MicrosoftEntraRecommendations ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics  

Get featured on the show by leaving us a Voice Mail: https://bit.ly/MIPVM FULL SHOW NOTES https://www.microsoftinnovationpodcast.com/692 When organizations rush to adopt AI tools like Microsoft Copilot, they often overlook a critical prerequisite: a secure, well-structured data environment. In this episode, Åsne Holtklimpen—Cloud Solution Architect at Crayon and Microsoft MVP—shares how her journey from SharePoint veteran to Copilot expert revealed a hard truth: without strong information governance, AI can do more harm than good. Åsne walks us through real-world challenges, practical frameworks, and the mindset shift needed to make AI adoption safe, scalable, and truly transformative. KEY TAKEAWAYS Security Before AI: Successful Copilot implementation starts with robust information security—classification, labeling, and governance must come first. Start Small, Scale Smart: Åsne recommends a phased approach using Microsoft Purview, beginning with basic data classification before layering on policies and automation. Expose the Risks: Demonstrating real data exposure—like personal identity numbers or health info—helps organizations understand the urgency of securing their environments. AI Readiness ≠ Cloud Presence: Many companies assume they're ready for AI because they use Teams or SharePoint, but Åsne stresses the need for deeper structural alignment. Public Sector Pressure: Norway's public sector faces a mandate to adopt AI by 2030, but Åsne warns that without guidance and foundational readiness, this push could backfire.  RESOURCES MENTIONED

Hallo Cloud Inspires Freunde, unglaublich aber war diese Folge ist bereits unsere 30. Folge und wie es sich für ein Jubiläum gehört haben wir auch diesmal einen ganz besonderen Gast am Start. Also hört gerne in unseren Podcast rein, in dem wir Chris Brumm zu Gast haben, der sich seit der ersten Stunde mit Global Secure Access beschäftigt und uns ins dieser Folge einige Einblicke in die neue Entra Lösung geben wird. Also gleich reinhören und gerne Feedback da lassen.Show NotesChristopher Brumm Brumm | LinkedInChris Brumm's BlogWhat is Global Secure Access? | Microsoft LearnEventsCloud Identity Summit – Cloud Identity ConferenceSwiss Microsoft Security Summit

Adversary nations are using ClickFix in cyber espionage campaigns. Japan's Financial Services Agency issues an urgent warning after hundreds of millions in unauthorized trades. The critical Erlang/OTP's SSH vulnerability now has public exploits. A flawed rollout of a new Microsoft Entra app triggers widespread account lockouts.  The alleged operator of SmokeLoader malware faces federal hacking charges. A new scam blends social engineering, malware, and NFC tech to drain bank accounts. GSA employees may have been oversharing sensitive documents. Yoni Shohet, Co-Founder and CEO of Valence Security, who cautions financial organizations of coming Chinese open source AI. Crosswalks in the crosshairs of satirical hacking. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest We are joined by Yoni Shohet, Co-Founder and CEO of Valence Security, discussing how the onslaught of more open source AI tools coming out of China will be difficult to manage for companies especially those in the financial sector. Selected Reading North Korea, Iran, Russia-Backed Hackers Deploy ClickFix in New Attacks (Hackread) Countries Shore Up Their Digital Defenses as Global Tensions Raise the Threat of Cyberwarfare (SecurityWeek) Japan warns of hundreds of millions of dollars in unauthorized trades from hacked accounts (The Record) Critical Erlang/OTP SSH RCE bug now has public exploits, patch now (Bleeping Computer) Widespread Microsoft Entra lockouts tied to new security feature rollout (Bleeping Computer) Alleged SmokeLoader malware operator facing federal charges in Vermont (The Record) New payment-card scam involves a phone call, some malware and a personal tap (The Record) Sensitive files, including White House floor plans, shared with thousands (The Washington Post) Hacking US crosswalks to talk like Zuck is as easy as 1234 (The Register)  Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Microsoft Entra User Lockout Multiple organizations reported widespread alerts and account lockouts this weekend from Microsoft Entra. The issue is caused by a new feature Microsoft enabled. This feature will lock accounts if Microsoft believes that the password for the account was compromised. https://www.bleepingcomputer.com/news/microsoft/widespread-microsoft-entra-lockouts-tied-to-new-security-feature-rollout/ https://learn.microsoft.com/en-us/entra/identity/authentication/feature-availability Erlang/OTP SSH Exploit An exploit was published for the Erlang/OTP SSH vulnerability. The vulnerability is easy to exploit, and the exploit and a Metasploit module allow for easy remote code execution. https://github.com/exa-offsec/ssh_erlangotp_rce/blob/main/ssh_erlangotp_rce.rb Sonicwall Exploited An older command injection vulnerability is now exploited on Sonicwall devices after initially gaining access by brute-forcing credentials. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022 Unpatched Vulnerability in Bubble.io An unpatched vulnerability in the no-code platform bubble.io can be used to access any project hosted on the site. https://github.com/demon-i386/pop_n_bubble

Widespread Microsoft Entra lockouts cause by new security feature rollout Malware delivered through diplomatic wine-tasting invites British companies told to hold in-person interviews to thwart North Korea job scammers Huge thanks to our sponsor, Dropzone AI Growing your MSSP client roster while your alerts are multiplying? Dropzone AI works alongside your team, investigating alerts just like your best human analysts would. Our AI SOC Analyst cuts investigation time from an hour to minutes while handling five times more alerts per analyst. Unlike complex SOAR solutions, Dropzone deploys quickly and adapts to your environment without the need for playbooks or coding. Eliminate backlogs, reduce false positives, and deliver the detailed investigations your clients expect. Ready to scale your MSSP without scaling your team? Meet us at booth ESE-60 at RSA. Find the stories behind the headlines at CISOseries.com.

Celebrate the 50 year anniversary of Microsoft. Like them or not you have to admire what they have been able to achieve and opportunities they have provided my business with their products and services. Unsurprisingly, AI was also part of that celebration with a raft of updates worth noting. Purview is big! If you haven't yet dived in then maybe it's time you did. Lots of things to learn in this episode. Brought to you by www.ciaopspatron.com Resources @directorcia Join my shared channel CIAOPS merch store Become a CIAOPS Patron CIAOPS Blog CIAOPS Brief CIAOPSLabs Support CIAOPS MS turn 50 50 Years of Microsoft | Our future is you Satya Nadella recreates Microsoft's first product Microsoft 50th anniversary + Copilot event Cheers to 50 years The origin story of Microsoft Source code - Bill Gates AI Your AI Companion Introducing Copilot Search in Bing Create pages with Copilot in SharePoint  Security Strengthen data security posture in the era of AI with Microsoft Purview Microsoft Purview – Data Security Posture Management (DSPM) for AI  Multi-workspace for Multi-tenant is now in Public Preview in Microsoft's Unified SecOps Platform Threat actors leverage tax season to deploy tax-themed phishing campaigns Why Windows Autopatch is the smart update solution New innovations in Microsoft Purview for protected, AI-ready data New innovations in Microsoft Entra to strengthen AI security and identity protection Building layered protection: New Microsoft Purview data security controls for the browser & network Windows 365 Maximize productivity and ROI with Windows 365: New innovations now generally available Vibe coding Introducing GitHub Copilot agent mode (preview)

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the intricacies of Microsoft Entra's conditional access. They explore the fundamental concepts of conditional access, its policies, and the integration of identity management with device management. The discussion highlights the importance of risk assessment, granular control, and the various conditions that can be applied to access controls. The hosts emphasize the significance of compliance policies and the interplay between different security measures to ensure robust protection against potential threats. In this conversation, Adam Brewer and Andy Jaw delve into the complexities of compliance and security in hybrid environments, focusing on access control mechanisms, session controls, and the innovative concept of authentication context. They explore the importance of ensuring devices are compliant and the various strategies organizations can implement to enhance security measures, including the use of approved client apps and continuous access evaluation. The discussion emphasizes the need for a layered security approach to protect sensitive information effectively.----------------------------------------------------YouTube Video Link: https://youtu.be/qvfEt49j2qQ----------------------------------------------------Documentation:https://learn.microsoft.com/en-us/entra/identity/conditional-access/overviewhttps://learn.microsoft.com/en-us/sharepoint/authentication-context-examplehttps://techcommunity.microsoft.com/blog/microsoft-entra-blog/conditional-access-authentication-context-now-in-public-preview/1942484https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/enhancing-security-with-entra-pim-and-conditional-access-policy-using-authentica/4368002----------------------------------------------------Contact Us:Website: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/company/bluesecpodYouTube:⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/andyjaw/Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠andy@bluesecuritypod.com⁠----------------------------------------------------Adam BrewerTwitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/ajbrewerLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/adamjbrewer/Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠adam@bluesecuritypod.com

Stay productive and connected with AI-powered experiences for frontline workers using Android and iOS devices to quickly sign in, manage tasks, find information, and collaborate with team members. Easily access essential resources, check inventory, and get instant answers from Copilot Chat and AI agents that you can build in SharePoint and Microsoft Copilot Studio. Microsoft 365's latest device experiences take frontline productivity and customer interactions to the next level—from improving customer interactions to managing worksites. Avery Salumbides, Microsoft 365 Frontline Product Manager, demonstrates key updates across Microsoft Teams, Copilot, and AI agents on mobile, plus essential admin setup considerations to equip your frontline. ► QUICK LINKS: 00:00 - Microsoft 365 AI-powered and Android and iPhone experiences 00:30 - Demo- Frontline worker experience 01:07 - Streamlined Task Management in Teams and using your own apps 02:34 - Use AI with Copilot Chat and agents to access information 05:13 - Connect with peers and translate conversations in Microsoft Teams 06:17 - Shift management & scheduling - even with nearby locations 06:48 - How to get it running in Microsoft 365 admin center 08:05 - Information access and setting up QR + PIN in Microsoft Entra 09:20 - Wrap up ► Link References Get started at https://aka.ms/M365Frontline ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics • Enjoy us on Instagram: https://www.instagram.com/msftmechanics • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

This week, we take a look at fresh guidance from Microsoft on increasing security for Microsoft Entra. It's an interesting guide - easily digestible, solid advice, and very actionable recommendations. Also, Tobi asks Jussi an unexpected question.(00:00) - Intro and catching up.(02:50) - Show content starts.Show links- Securing Microsoft Entra-guidance- Give us feedback!

Protect your organization from account takeover and hiring fraud as deepfake impersonation threats grow. With Microsoft Entra Verified ID, you can use Face Check to verify identities in real time against government-issued IDs like driver's licenses and passports. Use Face Check with integrated solutions for • new employee, guest or admin onboarding • step-up authentication to access sensitive information • securing common helpdesk-driven tasks, like user account recovery Setup is simple and has been designed so that both the enterprise and the person verifying their identity maintain control—without storing or passing biometric information like other face matching solutions. Join Ankur Patel, from the Microsoft Entra team, as he demonstrates how Face Check with Verified ID works and how to set it up. ► QUICK LINKS: 00:00 - Face Check with Microsoft Entra Verified ID 00:54 - AI-powered identity verification 01:44 - First time user experience 03:21 - How it works 04:55 - Use cases 05:34 - Set it up 06:16 - Update an app for Face Check 06:43 - Access packages 08:18 - Wrap up   ► Link References For more information, check out https://aka.ms/FaceCheckSetup Watch the complete playlist for Microsoft Entra Suite at https://aka.ms/EntraSuiteMechanics Access a list of identity verification providers at https://aka.ms/IDVpartners   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Get AI-powered assistance using Copilot Chat and agents in Microsoft 365 without a Microsoft 365 Copilot license. Research faster, analyze files with data protections, and automate repetitive tasks with Microsoft 365 Copilot Chat. Create and use agents to streamline workflows, with pay-as-you-go billing so you only pay for what you use. See how to easily configure access, pin Copilot Chat for quick use, and manage agent authoring in Copilot Studio. Jeremy Chapman, Director of Microsoft 365 shows how to optimize productivity while controlling costs. ► QUICK LINKS:  00:00 - Copilot Chat and agents 00:45 - How to use Copilot Chat 01:52 - Use agents in Copilot Chat 02:43 - Compare with Microsoft 365 Copilot 04:00 - Make it discoverable 04:48 - Configure access for author agents 06:22 - Pay-as-you-go 07:24 - Wrap up Link References Get a detailed comparison to Microsoft 365 Copilot at https://aka.ms/CopilotChat See how how pay-as-you-go works at https://aka.ms/CopilotChatMetering For more information, check out https://aka.ms/CopilotChatDocs For detailed Copilot enablement guidance go to https://adoption.microsoft.com/copilot Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

How can Entra ID Protection help keep your organization resist security breaches? Richard talks to Corissa Koopmans about thinking beyond authentication and authorization and into conditional access - knowing what is normal and abnormal behavior for your users. Corissa recommends looking at the Entra ID Protection Dashboard - whether you have configured anything or not - to see what potential risks you have today. Whether it's logins from places where you have no workers or some "impossible travel" or weird browser connections, ID Protection detects and identifies those events. When combined with conditional access, Defender for Cloud, or even Microsoft Intune - you get a "better together" effect that makes it easier to know when something bad is happening!LinksMicrosoft Entra ID ProtectionAzure Active Directory Conditional AccessEntra ID Protection DashboardLog Analytics AgentMicrosoft IntuneMicrosoft Defender for CloudMicrosoft SentinelRecorded December 10, 2024

In episode 226 of our SAP on Azure video podcast we have Martin Raepple with us again -- and this means authentication, principal propagation and identity management. A few months ago Martin had published a blog post about Identity and Access Management with Microsoft Entra and how to manage access to SAP BTP. Now he published part 2 where he extends the cloud only scenario with a hybrid identity setup that requires managing the user lifecycle across Microsoft Active Directory, Microsoft Entra, SAP BTP, SAP CIS, and an SAP system on-premise.Find all the links mentioned here: https://www.saponazurepodcast.de/episode226Reach out to us for any feedback / questions:* Robert Boban: https://www.linkedin.com/in/rboban/* Goran Condric: https://www.linkedin.com/in/gorancondric/* Holger Bruchelt: https://www.linkedin.com/in/holger-bruchelt/ #Microsoft #SAP #Azure #SAPonAzure #SAPIDM #Identity #Authentication #MSEntra

In this episode Michael, Gladys, Mark and Sarah talk to guest Diana Vicezar from the Microsoft Entra team about security Generative AI applications. Note, this is a short, simple intro episode to introduce three follow-on episodes. We also cover security news about TLS 1.3 and Azure Event Grid, big updates to Microsoft Defender for Cloud, Azure Database for MySQL, SQL Managed Instance and Confidential Ledger.

How is least privilege different in 2025? Richard talks to Bailey Bercik about the ongoing efforts to minimize users, administrators, and applications' privileges in 2025. Bailey talks about the power of Entra Permissions Management to help you see what permissions are going unused on various accounts so that you can tailor rights to individual accounts without things becoming unmanageable. Artificial intelligence is a forcing function for many permission issues, with these new tools potentially creating problems when given unnecessary rights. But those same tools can help you understand where permissions are being underutilized and help protect your systems!LinksPrinciple of Least PrivilegeEnable Permission ManagementEntra Permissions ManagementMicrosoft Security CopilotCopilot in Microsoft EntraSEC545: GenAI and LLM Application SecurityHow Attackers Use Apps to Attack VideoRecorded December 16, 2024

Global secure access, forkortet til GSA, er dagens tema. Et av de nyeste tilskuddene i Microsoft Entra, med sterke fokus på sikker tilgang til applikasjoner og sikker kommunikasjon for brukerneMarius, Alexander og Olav, ser på bruksområder, begrensninger og tar en kjapp tur innom lisenser. Hosted on Acast. See acast.com/privacy for more information.

Something new for this episode, AI generated content! This is part one of a two part test with the incorporation of AI generated content. In this episode I used Google NotebookLM to generated the Ai conversation you'll hear, after my normal intro. I am really interested in your feedback on what you think, good or bad. Watch out for part two, coming soon. Brought to you by www.ciaopspatron.com   Resources @directorcia Join my shared channel CIAOPS merch store Become a CIAOPS Patron CIAOPS Blog CIAOPS Brief CIAOPSLabs Support CIAOPS Your Workday Reimagined: Using Microsoft 365 Copilot in IT – https://www.youtube.com/watch?v=-jV67ObIiS4  Strategy to Execution: Operationalizing Microsoft Defender CSPM – https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/strategy-to-execution-operationalizing-microsoft-defender-cspm/4357354  Unplug this holiday season with these Microsoft 365 features – https://techcommunity.microsoft.com/blog/Microsoft365InsiderBlog/unplug-this-holiday-season-with-these-microsoft-365-features/4355248?  New Microsoft Purview features help protect and govern your data in the era of AI – https://www.microsoft.com/en-us/security/blog/2024/12/10/new-microsoft-purview-features-help-protect-and-govern-your-data-in-the-era-of-ai/  Convincing a billion users to love passkeys: UX design insights from Microsoft to boost adoption and security – https://www.microsoft.com/en-us/security/blog/2024/12/12/convincing-a-billion-users-to-love-passkeys-ux-design-insights-from-microsoft-to-boost-adoption-and-security/  Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine – https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/  Microsoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK® Evaluations: Enterprise – https://www.microsoft.com/en-us/security/blog/2024/12/11/microsoft-defender-xdr-demonstrates-100-detection-coverage-across-all-cyberattack-stages-in-the-2024-mitre-attck-evaluations-enterprise/  Take control during screen sharing in Teams for the web – https://techcommunity.microsoft.com/blog/Microsoft365InsiderBlog/take-control-during-screen-sharing-in-teams-for-the-web/4354595  What's new in Microsoft Entra – November 2024 – https://www.youtube.com/watch?v=NESTW0B1nAQ  Explore our latest Microsoft Security training on Microsoft Learn – https://techcommunity.microsoft.com/blog/microsoftsecurityandcompliance/explore-our-latest-microsoft-security-training-on-microsoft-learn/4351939  Boost productivity with Copilot in OneDrive – https://www.youtube.com/watch?v=c7wEqbKDQMg  Explore new Microsoft Entra capabilities at Gartner Identity & Access Management Summit 2024 – https://www.microsoft.com/en-us/security/blog/2024/12/04/explore-new-microsoft-entra-capabilities-at-gartner-identity-access-management-summit-2024/  Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage – https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/  Three new ways small and medium-sized businesses can purchase Microsoft 365 Copilot – https://www.microsoft.com/en-us/microsoft-365/blog/2024/12/02/three-new-ways-small-and-medium-sized-businesses-can-purchase-microsoft-365-copilot/  Safeguarding AI against ‘jailbreaks' and other prompt attacks – https://news.microsoft.com/source/?post_type=features&p=8732  Update on nested app authentication and deprecation of Exchange Online legacy tokens – https://techcommunity.microsoft.com/blog/exchange/update-on-nested-app-authentication-and-deprecation-of-exchange-online-legacy-to/4351951  Gather and create notes with Copilot in your personal OneNote notebooks directly on the page – https://techcommunity.microsoft.com/blog/microsoft365insiderblog/gather-and-create-notes-with-copilot-in-your-personal-onenote-notebooks-directly/4294053  After hours The World According To Kaleb On Tour | Official Trailer | Prime Video – https://www.youtube.com/watch?v=dqAXVQZ6jww   

Provide tailored Cloud PC experiences for diverse workforce needs with Windows 365 Frontline. With shared mode, offer cost-effective, on-demand Cloud PCs that reset after each session—ideal for frontline and part-time staff needing intermittent access. Dedicated mode delivers a personalized, consistent desktop experience for employees requiring prolonged use, all managed through Microsoft Intune. As an IT admin, set precise access policies, automate session timeouts, and adjust resources based on role requirements. Sam Tulimat, Cloud Endpoints Principal PM Lead, shows how Windows 365 Frontline is designed to optimize resources, streamline workflows, and meet the unique needs of any team, ensuring every employee has the tools they need, when and where they need them.   ► QUICK LINKS: 00:00 - One Cloud PC for multiple users 01:01 - Optimize costs with shared Cloud PCs 01:44 - Role-specific Cloud PCs 02:15 - Dedicated mode configuration 04:40 - Shared mode configuration steps 06:25 - Provisioning Policies 07:15 - Options to reprovision Cloud PCs 07:49 - Wrap up   ► Link References To get started, check out https://aka.ms/Windows365Frontline    ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Microsoft Entra “security defaults” to make MFA setup mandatory Ransomware attack hits German pharmaceutical wholesaler AEP Upgraded LightSpy spyware targets iPhones with more destructive power Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire Automation, security & compliance teams can complete security reviews up to 5 times faster, giving you time back to focus on running your security & compliance programs. Over 8,000 global companies like ZoomInfo, SmartRecruiters and Noibu use Vanta to save time on security reviews.   Visit vanta.com to learn more about Questionnaire Automation.   Find the stories behind the headlines at CISOseries.com.

It's OneDrive's turn in the spotlight. After a recent dedicated OneDrive event I have all the latest about updates and improvements that have been announced. Of course, there is plenty of other news also around security and Copilot as well as improvements to the new Outlook that you should check out. Thanks again for listening. Resources @directorcia Join my shared channel CIAOPS merch store Become a CIAOPS Patron CIAOPS Blog CIAOPS Brief CIAOPSLabs Support CIAOPS Welcome to the New Era of Microsoft OneDrive: AI, Productivity, and Memories at Your Fingertips  Get to know Copilot in OneDrive Introducing Copilot in OneDrive: Now Generally Available What's New In Copilot | September 2024 New Copilot enhancements help small and medium-sized businesses innovate Introducing Copilot Labs and Copilot Vision New experiences coming to Copilot+ PCs and Windows 11 An AI companion for everyone  Create desktop flows using the AI Recorder  Token theft protection with Microsoft Entra, Intune, Defender XDR & Windows Use community queries to hunt more effectively across email and collaboration threats What's new in Microsoft Entra – September 2024  What is Microsoft Entra (and why use it)? Research Threat intelligence Microsoft Defender XDR Business email compromise Improved user experience for Dictate in new Outlook for Windows and Outlook for the web Getting started with the new Outlook for Windows Learn about the new Outlook for Windows Level Up Your Security Skills with the New Microsoft Sentinel Ninja Training! Microsoft Defender XDR Monthly news - October 2024  Windows 11, version 24H2 security baseline Windows 11, version 24H2: What's new for IT pros Security settings management is available for multi-tenant environments in Microsoft Defender XDR Implementing a secure by default approach with Microsoft Purview and address oversharing Microsoft Intune support for Apple Intelligence Microsoft is named a Leader in the 2024 Gartner® Magic Quadrant™ for Endpoint Protection Platforms Microsoft Ignite  

Check out Microsoft 365 Copilot Wave Two updates, featuring Business Chat and the new Copilot Pages for enhanced collaboration, advancements in Excel data analysis, AI-driven file comparisons in OneDrive, and easy-to-create Copilot agents for automating business processes. If you are in IT, we'll show you improved integrations with our security and compliance stack. Mary Pasch, Principal Product Manager, joins Jeremy Chapman to walk through the updates, including what it means for Microsoft 365 admins. ► QUICK LINKS: 00:00 - Microsoft 365 Copilot Wave Two 00:45 - How Copilot is evolving 01:32 - BizChat and Copilot Pages 02:58 - Copilot in Excel 04:41 - Copilot using Python in Excel 06:05 - Compare and contrast documents 07:18 - Create Copilot agents from BizChat 08:44 - Create Copilot agents from SharePoint 10:12 - .copilot files 10:44 - Enterprise-grade data protection 13:54 - Wrap up   ► Link References Check out new Copilot experiences at https://aka.ms/CopilotWave2 Access advanced enterprise data protections at http://microsoft.com/copilot   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Prevent attackers from stealing your identity and data by protecting your tokens. In single sign-on systems like SAML and OAUTH, tokens are how services know who you are and what you can do. When you sign in to your machine with your Microsoft Entra ID account, you are getting a session token you can use to access things like your email, teams and other apps. Check out new capabilities like Credential Guard in Windows enforced by device policies in Intune, Token Protection enforcement in Microsoft Entra, and Token theft detections in Microsoft Sentinel and Defender XDR. Alex Weinert, from the Microsoft Entra team, explains what tokens are, how token theft works, and how to defend yourself from these attacks.   ► QUICK LINKS: 00:00 - Token theft attacks 01:39 - Token basics 02:59 - Token theft demo 03:41 - How to use token protection 05:22 - Additional Token theft defenses 06:25 - How to detect and shut down attacks 08:01 - Wrap up   ► Link References Get started at https://aka.ms/TokenTheftDefense   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

In this episode of the Security Swarm Podcast, host Andy Syrewicze and our regular guest, Paul Schnackenburg, provide a comprehensive overview of the Microsoft Defender ecosystem. They cover the various Defender products, including:  Defender for Endpoint - Microsoft's enterprise endpoint security solution with different licensing tiers  Defender for Identity - Cloud-based threat detection for on-premises Active Directory  Defender Vulnerability Management - Inventory and risk assessment of software on endpoints  Defender for IoT - Security for Internet of Things and operational technology environments  Defender for Cloud - Cloud security for Azure, AWS, and GCP resources  And Others!  They also discuss the "Defender adjacent" services like Microsoft Entra (identity), Microsoft Purview (data security/governance), and Microsoft Defender for Cloud Apps (CASB).  A key focus of the discussion is the complexity and management challenges that come with this expansive Defender suite. The host and the guest note the large number of different management portals, the difficulty of adequately configuring and leveraging all the features, and the need for dedicated security teams to utilize these enterprise-grade tools fully.   Further down the line, Andy and Paul explore the significant value that third-party security solutions can provide in augmenting or simplifying the M365 security experience. They highlight how third-party tools can offer easier deployment, management, and specialized capabilities that may be outside the core focus of the broader Defender ecosystem, thereby enhancing the overall security posture of an organization.   Overall, this episode takes a deep dive into the Microsoft Defender landscape, exploring the pros and cons of the comprehensive suite and offering insights on how organizations can optimize their security with a mix of Microsoft and third-party solutions.  CTA: Overwhelmed by the complexity of the Microsoft Defender ecosystem? Simplify your Microsoft 365 security, risk management, governance, compliance, and backup with 365 Total Protection by Hornetsecurity.  Key Takeaways:  The Microsoft Defender ecosystem has grown significantly beyond the basic antivirus/anti-malware solution, now encompassing a wide range of security products and services across endpoints, cloud, identity, and more.  Navigating the Defender suite can be challenging due to the sheer number of products, overlapping features, and disparate management portals, especially for smaller organizations without dedicated security teams.  Licensing for Defender products can be complex, with different SKUs (P1, P2, Business Premium, E3, E5) offering varying levels of functionality and requiring careful evaluation to ensure the right fit.  Third-party security solutions can provide value by offering simplified management, enhanced detection capabilities, and avoiding over-dependence on a single vendor (Microsoft) for an organization's security needs.  Proper configuration and ongoing optimization of Defender tools is difficult and time consuming, leaving the full potential of the suite to enterprises with dedicated security teams.  Microsoft Defender XDR (Extended Detection and Response) aims to integrate Defender products into a more cohesive security platform. Still, it requires significant resources and expertise to implement effectively.  Timestamps:  (02:00) Overview of the Microsoft Defender ecosystem  (07:00) Differences between Microsoft Defender for Endpoint P1, P2, and Business Premium  (13:00) Explanation of Microsoft Defender for Identity and its on-premises vs cloud components  (19:00) Discussion of Microsoft Defender Vulnerability Management and its challenges for small/medium businesses  (32:00) Value that third-party security solutions can provide compared to the Microsoft Defender suite  Episode Resources:  Security Swarm Episode on M365 Security Licensing

In this episode of the Heroes of IT podcast, Ashley interviews Jack Milburn, a senior IT engineer with a focus on cloud security. They discuss Jack's experience with Automox and how he uses it for patching and vulnerability scanning. They also talk about Automox University (AXU) and the value of online learning in bridging the skills gap in IT. Jack shares his journey of earning certificates and the different levels of complexity in AXU courses. They also touch on the importance of company culture in promoting continuous learning.

Microsoft Entra admins must enable MFA or lose access to admin portals Cybercrime gang uses fake Windows update screen to hide data theft Google Pixel devices shipped with vulnerable Verizon app Thanks to today's episode sponsor, Nudge Security How big is your SaaS attack surface? Find out today with Nudge Security. Nudge Security discovers all SaaS accounts ever created by anyone in your org, in minutes, and gives you automated workflows to scale SaaS security and governance. Take control of your SaaS security posture. Start a free trial today at nudgesecurity.com/cisoseries For the stories behind the headlines, head to CISOseries.com.

Ergo, one of Ireland's leading IT services providers, has achieved the Microsoft Modernise Endpoints specialisation, a recognition given to Microsoft partners globally who demonstrate deep knowledge, extensive experience, and proven success in delivering holistic solutions designed for the hybrid workplace. As the world of work changes and businesses continue to operate hybrid models of working, organisations need to manage and enable secure access to corporate resources across mobile, desktop, and virtual endpoints to better enable their workforce and set them up for success. This includes devices users need, operating systems that are secure by design, endpoint management solutions, and collaborative applications that are accessible from anywhere. Microsoft Capabilities The Ergo team works to embed a culture of collaboration and secure hybrid working inside global multi-site organisations, using Microsoft solutions such as Microsoft Intune, Microsoft 365, Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Entra and Microsoft Azure Virtual Desktop Infrastructure to bring disparate workforces together for a seamless experience. Speaking on the recognition, Gerry Hampson, Client Management Practice Lead at Ergo, and Microsoft MVP, said: "In a world where workplaces are increasingly disparate, it is essential that organisations are set up for success when managing teams across multiple locations and geographies." "This achievement is testament to the hard work and dedication of the team here in Ergo, who are steadfast in their commitment to ensuring that our customers are set up for success through preparing them for today, while planning for tomorrow." Paul Chawke, Partner Development Manager at Microsoft said: "Ergo has a longstanding, 30-year long history with Microsoft achieving technological advancements and innovation in Ireland. This achievement recognises the work that Ergo are carrying out when it comes to equipping organisations for success through Modernize Endpoint solutions." Ergo has extensive knowledge and capabilities in the area of modern work, with one of the largest Microsoft practices in Ireland and five Microsoft MVPs (Most Valuable Professionals, the highest accolade a Microsoft engineer can be awarded), three of whom contribute to modern work areas such as Microsoft 365 Development and Enterprise Mobility. Ergo is also a Microsoft Solution Partner for Modern Work with specialisations in adoption and change management, meetings and meeting rooms for Microsoft Teams, and Modernise Endpoints. This expertise was recognised as Ergo took home the Microsoft Partner of the Year Award 2024. This is the sixth time Ergo has won the Country of the Year Award making it the most recognised Microsoft Partner in Ireland. See more stories here.

This week: three wild iPhone rumors — a folding phone, a slim phone, a DSLR camera phone — also, is Apple TV's streaming bubble about to burst? This episode supported by: Listeners like you. Your support helps us fund CultCast Off-Topic, a new weekly podcast of bonus content available for everyone; and helps us secure the future of the podcast. You also get access to The CultClub Discord, where you can chat with us all week long, give us show topics, and even end up on the show. Support The CultCast at support.thecultcast.com — OR at CultOf9to5MacRumors.com Easily create a beautiful website all by yourself, at Squarespace.com/CultCast. Use offer code CultCast at checkout to get 10% off your first purchase of a website or domain. Notion AI can now give you instant answers to your questions, using information from across your wiki, projects, docs and meeting notes. Go to notion.com/cultcast to try the powerful Notion AI today. 1Password Extended Access Management solves the problems traditional IAM and MDM can't touch. It's security for the way we work today, and it's available now to companies with Okta, and coming later this year to Google Workspace and Microsoft Entra. Check it out at 1Password.com/product/XAM. This week's stories: ‘iPhone 17 Slim' could become Apple's new premium handset https://www.cultofmac.com/863264/iphone-17-slim-rumors-first-specifications-leaks-price/ iPhone 17 camera could get DSLR-like variable aperture https://www.cultofmac.com/863482/iphone-17-could-get-dslr-camera-like-variable-aperture/ Folding iPhone could shake up Apple's lineup in 2026 https://www.cultofmac.com/863430/folding-iphone-release-date-design-apple-2026/ Bulked-up iPhone SE 4 could add OLED screen for first time https://www.cultofmac.com/863269/bigger-iphone-se-4-with-oled-display/ Apple tightens the purse strings on Apple TV+ https://www.cultofmac.com/863225/apple-tv-plus-budget-cuts/

It's Brett's 46th birthday bash, and he's celebrating in style with Jeff and Christina. Expect gifts like Cooks Illustrated and flood detectors, riveting overflowing toilet tales, and sampling fun with Koala. Dive into comedy insights with an ‘Elf' story featuring James Caan, and honor Bob Newhart's 1961 Grammy win. Plus, a TUAW domain kerfuffle and Macstock marvels. Laugh, learn, and maybe even fix your toilet seat! Sponsor 1Password Extended Access Management solves the problems traditional IAM and MDM can't touch. It's security for the way we work today, and it's available now to companies with Okta, and coming later this year to Google Workspace and Microsoft Entra. Check it out at 1Password.com/product/XAM. Chapters 00:00 Introduction and Birthday Celebrations 00:43 Gifts and Subscriptions 02:37 Home Improvement and Plumbing Stories 03:53 The Best Toilet Seat Ever 05:52 Plumbing Mishaps and Family History 11:10 Birthday Party Plans 13:40 CrowdStrike Incident 19:09 Sponsor: 1Password 21:20 Sponsor bonus content 27:33 Reviving TUAW: A Controversial Story 33:59 AI Articles and Identity Theft 35:08 The Resurrection of Old Content 35:48 Reflecting on Past Work 37:40 The Sale of Content Rights 44:50 Macstock Reunion 50:09 GrAPPtitude: App Recommendations 01:04:38 Remembering Bob Newhart Show Links Best toilet seat ever Major Windows BSOD issue hits banks, airlines, and TV broadcasters - The Verge A Beloved Tech Blog Is Now Publishing AI Articles Under the Names of Its Old Human Staff (404media.co) Early Apple tech bloggers are shocked to find their name and work have been AI-zombified - The Verge Apple blog TUAW returns as an AI content farm (engadget.com) Screen Studio Kaleidoscope Welcome Kaleidoscope 5 Koala Sampler Jammin' on the One Join the Conversation Merch Come chat on Discord! Twitter/ovrtrd Instagram/ovrtrd Youtube Get the Newsletter Thanks! You're downloading today's show from CacheFly's network BackBeat Media Podcast Network Check out more episodes at overtiredpod.com and subscribe on Apple Podcasts, Spotify, or your favorite podcast app. Find Brett as @ttscoff, Christina as @film_girl, Jeff as @jsguntzel, and follow Overtired at @ovrtrd on Twitter. Transcript Jammin' on the One [00:00:00] Introduction and Birthday Celebrations [00:00:00] [00:00:03] Brett: Hey, happy birthday. It's my birthday. It's Overtired. Um, we're all here this week. It's Jeff Severance Gunsel, Christina Warren, and myself, Brett Terpstra. Uh, how are you guys? [00:00:16] Christina: Not too bad. Go on, go on, Jeff. Yeah, exactly. I was gonna say pretty birth I was gonna say happy birthday. I was like, not as good as you, birthday boy, but you know, [00:00:24] Brett: I'm 46 today [00:00:26] Jeff: Forty six. [00:00:28] Brett: I'm not lying about my age like some people do. Um, [00:00:33] Christina: It might be, it might be your birthday, but I'll still tell you to fuck off. I can lie about my age as long as I want. [00:00:37] Brett: I wasn't singling you out. I just said some people. [00:00:41] Jeff: Some people. [00:00:43] Christina: Some [00:00:43] Gifts and Subscriptions [00:00:43] Brett: Um, yeah, I, uh, I've had a really good birthday. Elle, Elle knows how much I love getting gifts and I'm too old for most people to give me so they take it upon themselves to shower me. With gifts every year. [00:01:00] Um, and this year they got me a bunch of cool stuff, including a subscription to Cooks Illustrated and, uh, the book Vegetables Illustrated from Cooks Illustrated, which I'm very excited. [00:01:11] Jeff: Print subscription? What a beautiful is this still beautiful? It's been a long time. I don't know if it got eaten by okay, [00:01:17] Brett: I was picking them up at the co-op and just like, well actually, uh, one of the, one of the families that EL was house sitting for had them laying out. And I had forgotten how much I loved that magazine. Even like,

Get a unified solution for secure access management, identity verification, and Zero Trust security for cloud and on-premises resources. The new Microsoft Entra suite integrates five capabilities: Private Access, Internet Access, ID Protection, ID Governance, and Face Check as part of Verified ID Premium, included with Microsoft Entra Suite. With these capabilities, you can streamline user onboarding, enhance security with automated workflows, and protect against threats using Conditional Access policies. See how to reduce security gaps, block lateral attacks, and replace legacy VPNs, ensuring efficient and secure access to necessary resources. Jarred Boone, Identity Security Senior Product Manager, shares how to experience advanced security and management with Microsoft Entra Suite.   ► QUICK LINKS: 00:00 - Unified solution with Microsoft Entra Suite 00:38 - Microsoft Entra Private Access 01:39 - Microsoft Entra Internet Access 02:42 - Microsoft Entra ID Protection 03:31 - Microsoft Entra ID Governance 04:18 - Face Check in Verified ID Premium, included with Microsoft Entra Suite 04:52 - How core capabilities work with onboarding process 06:08 - Protect access to resources 07:22 - Control access to internet endpoints 08:05 - Establish policies to dynamically adjust 08:45 - Wrap up   ► Link References Try it out at https://entra.microsoft.com  Watch our related deep dives at https://aka.ms/EntraSuitePlaylist  Check out https://aka.ms/EntraSuiteDocs  ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Latest news and updates from the Microsoft Cloud. Global Secure Access pricing has been announced but not a lot of details published on this as yet, hopefully soon. Updates for both Entra and Copilot that you should take a look at. Also a great video demonstrating the use of Microsoft technology in a modern classroom. Thanks again for listening. Resources @directorcia Join my shared channel CIAOPS merch store Become a CIAOPS Patron CIAOPS Blog CIAOPS Brief CIAOPSLabs Support CIAOPS What is Global Secure access? Microsoft Entra certificate-based authentication enhancements OneNote Copilot now supports inked notes What's new in Microsoft Entra – June 2024 Intro to Config Refresh – a refreshingly new MDM feature Why AI sometimes gets it wrong — and big strides to address it More Threat Intelligence Content in MDTI, TA Enables Better Security Outcomes What's new in Copilot | June 2024 Driving Copilot for Microsoft 365 adoption with an assist from Microsoft Viva Introducing the Microsoft Entra PowerShell module Mitigating Skeleton Key, a new type of generative AI jailbreak technique A basic demo of an AI crescendo [VIDEO] Copilot for Security TI Embedded Experience in Defender XDR is now GA User insights: Analyze customer identity data How to start transforming your business with AI | AI at work with Microsoft's Jared Spataro [VIDEO] Inside UNSW's State-of-the-Art Digital Teaching Studio - Microsoft Teams Rooms

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

How are your company's Apple devices connected to the enterprise? Richard talks to Michael Epping about the recent additions in Entra that support the authentication of Apple MacOS and iPadOS devices. Michael discusses Apple's Secure Enclave as the equivalent of Trusted Platform Management in Windows. With Entra Platform SSO, you can now use that authentication to access Azure resources and, ultimately, on-premises Kerberos-secured resources! These features are still in public preview but fully supported, and more is coming!LinksMicrosoft IntuneWindows AutopilotMicrosoft Entra HybridMicrosoft Entra SSO Plug-in for Apple DevicesApple Secure EnclaveIntegrate Apple Devices with Microsoft Entra IDApple Automated Device EnrollmentEntra Conditional AccessmacOS Platform Single Sign-onJoin a Mac device with Microsoft Entra IDRecorded May 13, 2024

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

Recall debate, orchestration, Bing turns 15 Attack of the Copilot+ PCs Nvidia: GeForce RTX AI PCs will get Copilot+ PC status ... some day AMD: Ryzen AI 300 series (laptops) and AMD Ryzen 9000 series (desktops) have 50 TOPS NPUs and an on-stage apology, er, admission, from Microsoft Intel: Lunar Lake delivers 48 TOPS NPU, new GPU Qualcomm - Don't forget us! We're going to go after every PC form factor there is Thinking about AI, NPUs, and local workloads - Is an orchestrator in our future? Microsoft needs to address the Recall controversies Framework Laptop 13 is coming with Intel Core Ultra chips HP earnings - PC business up 3 percent in Q Dell earnings - PC business is flat Windows 11 Microsoft delivers its Week D preview update a day late If you're on 24H2 like I recommended last week, you get ... wait for it ... Copilot as an app Canary: Copilot as an app, Emoji 15.1 support Dev: Copilot as an app Microsoft adds a Windows 10 Insider Preview Beta channel to test new features Microsoft Bing is 15 years old. What can we possibly celebrate? More Microsoft layoffs, this time in Mixed Reality and Azure AI Apple reportedly partnering with OpenAI. Microsoft reportedly pissed about Apple partnering with OpenAI Google is fixing its AI overviews in Search And if anyone still trusts Google AI for some reason, Google Gemini 1.5 Pro and 1.5 Flash are now GA Amazon brings AI search, and to Fire TV for some reason When Raspberry Pi 5 can do AI is AI just everywhere now? Xbox Asus announces ROG Ally X gaming handheld - are these to gaming what 8.1-inch tablets were to Windows 8.1? PlayStation VR2 adapter for PC is $60 Tips & Picks App pick of the week: Opera RunAs Radio this week: Apple and Microsoft Entra with Michael Epping Brown liquor pick of the week: Nikka "From the Barrel" Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: kolide.com/ww HP.com - WW - https://bit.ly/4adilko

In this episode of the Security Swarm Podcast, our host Andy and guest speaker Jan Bakker discuss passkeys in the Microsoft ecosystem. They cover topics such as the definition of passkeys, prerequisites, tips for implementation, and the user experience. They also highlight the user-centric enrollment process, the role of conditional access, and the potential challenges and advantages of transitioning to passkeys.  Key takeaways:  Passkeys are a new authentication mechanism using the FIDO2 standard, providing a secure and user-friendly passwordless experience.  Device-bound passkeys are more secure but not transferable between devices, while syncable passkeys offer convenience but may introduce potential security risks.  Passkeys enhance security by being phishing-resistant and replacing traditional passwords and MFA methods.  The enrollment process involves using the Microsoft Authenticator app and ensuring prerequisites like device compatibility and Bluetooth connectivity.  Admins can enforce authentication method policies and conditional access to control user access and enhance security.  User education, interface improvements, and conditional access play crucial roles in a successful transition to passkeys.    Timestamps:  (03:04) - Unlocking the Future of Passkeys and the Evolution of Authentication  (06:18) - Exploring the Security Benefits of Device Bound and Syncable Passkeys  (14:54) - How to Prepare for Passkeys in Microsoft 365  (23:03) - Navigating the Rollout of Passkeys for Enhanced Security: Admins vs End Users  (29:03) - Maximizing Security with Passkeys, Conditional Access, and Authentication Policies  (33:01) - Unveiling the Convenience of Device-Bound Passkeys in Vasquez for Microsoft 365    Episode Resources:  Previous episode on Passkeys Blog post of Jan  

Two old guys talk about Windows AGAIN? Richard brings back Paul Thurrott for the tenth time to discuss Windows more. This time, the discussion focuses on the end of life for Windows 10 - currently October 2025. Paul discusses how it used to be April 2025, but that's not enough time. Is it enough time now? The conversation spans other Windows-related topics, including alternative versions like Windows 365 and Azure Virtual Desktop. And what about Windows 12? There is a bit of speculation at the end of a longer show - weigh in with your thoughts on what's next for Windows!LinksEnd of Support for Windows 10, 8.1, and 7Windows AutopilotWindows CopilotMicrosoft IntuneWindows 365Microsoft EntraAzure Virtual DesktopRecorded April 26, 2024

How's your identity governance? Richard talks to Jef Kazimer from Microsoft about Entra's capabilities to help you have robust governance around identity. Jef talks about the lifecycle of identity - when someone joins the organization and a new identity gets created, privileges changing as roles evolve, to the eventual offboarding when that person departs. The same sort of cycle exists for devices, too - the question is only how much work you must do to get through those cycles. Entra offers tooling to get identity changes out of your support tickets - make your life easier with effective identity governance! LinksMicrosoft EntraConditional AccessMicrosoft Entra Permission ManagementRoad to the CloudEntitlement ManagementMy Access PortalJust Enough AdministrationPrivileged Access WorkstationEntra Lifecycle WorkflowsAzure Logic AppsUsage and Insight Reports in Entra425 ShowRecorded April 26, 2024

Roll out Microsoft Copilot for Microsoft 365 at scale in three quick steps. See the methods for each to efficiently enable Copilot services: Optimize Search with data controls in place to limit exposure of information in search. Update Your Apps—both on desktop and mobile—so they are ready for integrated Copilot experiences. Grant Access to Copilot services quickly to large groups in your organization via Microsoft Entra controls. We're also introducing a new capability with Restricted SharePoint Search, which enables SharePoint administrators to define the sites where every user in the organization is allowed to files and data using search, without impacting access to sites and files for people working in sites, which are not allowed for everyone to search. With Copilot for Microsoft 365 services in place, track adoption and impact, and see how different groups in your organization are benefitting from Copilot services with the Microsoft Copilot Dashboard powered by Viva Insights. Now, even if you don't currently own Viva Insights, there is an offer for Microsoft Copilot customers to get these services included with your Copilot subscription: https://www.microsoft.com/en-us/microsoft-365/blog/2024/04/11/enabling-your-ai-transformation-journey-with-microsoft-viva/   ► QUICK LINKS: 00:00 - Steps to deploy Copilot for Microsoft 365 01:01 - How to quickly optimize search 02:24 - How to set up Restricted SharePoint Search 03:23 - Update Microsoft 365 apps on managed devices 05:34 - Grant access to Copilot services 06:20 - Copilot Dashboard included with any Microsoft 365 subscription 07:00 - Copilot Dashboard powered by Viva Insights subscription 08:38 - Wrap Up   ► Link References: Get started at https://aka.ms/DeployCopilotforM365 Watch how to get ready for Copilot at https://aka.ms/CopilotSecurityMechanics For more resources go to https://adoption.microsoft.com/copilot   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Protect your organization from insider threats with Microsoft Entra's Conditional Access and Adaptive Protection in Microsoft Purview. Automatically block access to critical assets when insider risk levels elevate, ensuring data security and compliance seamlessly. Set up custom policies based on risk levels and enforce strong authentication measures, safeguarding against data breaches. Gain control and visibility over insider activities without manual intervention, empowering proactive security measures. Erin Miyake, Microsoft Purview's Principal Product Manager shares how to enhance your data protection strategy.   ► QUICK LINKS: 00:00 - Insider Risk in Conditional Access 00:41 - Extend Conditional Access 01:20 - Privacy-first approach 01:56 - Configure policy indicators 03:21 - Adapt protections based on changing risk 04:13 - Set custom policies 05:27 - Set a Conditional Access policy for moderate risk users 06:12 - Insider risk level changing over time 07:04 - Wrap Up   ► Link References: For more about the policies you can set up go to https://aka.ms/IRM Mechanics Get started today at https://aka.ms/adaptiveprotection  Watch our series on Insider Risk Management at https://aka.ms/IRMMechanics   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024! Show Notes/Links: Intern Program: https://www.microsoft.com/en-IE/earlycareers/internsapprenticeships What went Generally Available (GA) since February 2024? Granular filtering of Conditional Access (CA) policy list – CA policies can now be filtered on actor, target resources, conditions, grant control and session control. The granular filtering experience can help admins quickly discover policies containing specific configurations. Microsoft Entra ID Protection: Suspicious API traffic detection for users – This new detection is reported when abnormal Microsoft Graph traffic or directory enumeration is observed by a user. Suspicious API traffic might suggest that a user is compromised and conducting reconnaissance in their environment. Microsoft Entra ID Protection: Risk remediation on the Azure mobile app – Adds remediation capabilities of Microsoft Entra ID Protection which were previously only available in the Microsoft Entra portal to the Azure mobile app. This capability includes comprehensive reporting, offering insights into risky behaviors such as compromised user accounts and suspicious sign-ins, and includes the Risky users and Risky sign-ins report. New public previews Authentication Flows for Conditional Access – Supports the ability to configure CA policies to restrict or block the usage of certain authentication flows. The first iteration of this feature is limited to device code flow and authentication transfer. Conditional Access: Require reauthentication every time - Lets you require users to interactively provide credentials again before accessing critical applications and taking sensitive actions on any resource protected by CA. Workbook for impact analysis of risk-based Conditional Access policies - The Microsoft ID Protection risk analysis workbook helps admins understand what would happen if you create and enable Microsoft Entra ID Protection risk based CA policies in your environment. Workbooks are a collection of information, including queries, tables, and visualizations over a period of time to help you make sense of underlying data from an existing Log Analytics workspace.   Watch the live replay…  

Protect against identity-based attacks with Identity Threat Detection and Response capabilities. Ensure your organization is equipped to protect identities wherever they are—on-premises, in the cloud or hybrid. As an integral component of the XDR experience, identity alerts are contextualized within broader security incidents, enhancing your ability to manage threats effectively. The integrated Copilot experience and advanced hunting capabilities allow for in-depth investigation of alerts and activity logs. Security analysts and identity admins can collaborate seamlessly with bidirectional integration between Defender XDR and Microsoft Entra.  Daniel Lynch, Microsoft Defender for Identity's Senior Product Manager, shares how Identity Threat Detection and Response can be utilized in daily operations and coordinated actions throughout every phase of an identity-related security incident, strengthening your organization's defense posture.   ► QUICK LINKS:  00:00 - Stop identity-based attacks 01:13 - How to use Identity Threat Detection and Response 02:37 - See an active multi-stage incident 03:57 - Use Copilot for Security 05:08 - Advanced Hunting in Microsoft Defender XDR 05:38 - Block a compromised user account in Active Directory 06:44 - Improve security posture in Microsoft Defender XDR with Secure Score 08:04 - Wrap Up   ► Link References: For more information, check out https://aka.ms/ITDR   ► Unfamiliar with Microsoft Mechanics?  As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast   ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics  • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics  

In Episode 361, Ben and Scott discuss how Ben solved a data analysis problem with Azure Data Explorer and Scott shares some tips and tricks for Kusto. It's also the season of giving and we're raising money for Girls Who Code. Donate today at https://give.girlswhocode.com/msclouditpro! Like what you hear and want to support the show? Check out our membership options. Show Notes What is Azure Data Explorer? Get data from file Get-MessageTrackingLog Two The Cloud -�Azure Data Explorer - One-click Ingestion parse-where operator case() TLS 1.2 to become the minimum TLS version for Azure Storage KB4017023 - SQL Server 2012, 2014 or 2016 Backup to Microsoft Azure Blob storage service URL isn't compatible for TLS 1.2 TLS 1.2 support for Microsoft SQL Server Upcoming TLS 1.3 on Azure App Service for Web Apps, Functions, and Logic Apps Update Microsoft Deprecates Three Features in Windows 11 Version 23H2 Windows CE, Microsoft's stunted middle child, reaches end of support at 26 years Automatic Conditional Access policies in Microsoft Entra streamline identity protection About the sponsors Intelligink utilizes their skill and passion for the Microsoft cloud to empower their customers with the freedom to focus on their core business. They partner with them to implement and administer their cloud technology deployments and solutions. Visit Intelligink.com for more info.

So, what's Microsoft Entra all about? Richard chats with VPN guru Richard Hicks about his experiences with Microsoft Entra. More than just a new name for Azure Active Directory, Entra includes essential tooling to provide secure access to all sorts of services - and not only Microsoft ones! Richard talks about how Azure Conditional Access can be applied across all types of Microsoft products and with Entra Application Proxy, you can access your internal services and servers. Many of the capabilities are in preview now - but the future looks bright for Entra and Conditional Access!Links:Microsoft EntraMicrosoft Global Secure Access ClientAzure Conditional AccessMicrosoft Entra Private AccessMicrosoft Entra Application ProxyRDP using NPS and EntraMicrosoft Secure Access Service EdgeImplementing Always On VPNRecorded October 10, 2023

In this episode of the PowerShell Podcast, we had an enlightening conversation with Merill Fernando, a Principal Product Manager on Microsoft's Entra team. Our discussion unveiled an in-depth look at Microsoft Entra, providing listeners with tips and tricks. Merill generously shared his journey in becoming a PM, emphasizing the pivotal role of learning and sharing knowledge within our tech community. We also delved into the emerging importance of transitioning from the AzureAD module towards a more streamlined approach using Graph. Not to miss, Merill spotlighted his widely acclaimed tools such as [akasearch.net](http://akasearch.net), idPowerToys, and entra. news, and more, opening up an array of exciting possibilities for our listeners. Join us as we explore these topics and a whole lot more in yet another riveting session of the PowerShell Podcast. Guest Bio and links:  Merill Fernando is a Principal Product Manager in the Microsoft Entra product group at Microsoft Security. In his role he helps some of Microsoft's biggest customers define their identity strategy and deploy Microsoft Entra. He is passionate about Microsoft Graph, PowerShell, DevOps and you can usually find him on LinkedIn, X, and YouTube talking about these topics. In his spare time, he works on some popular open-source app including http://cmd.ms, idPowerToys, and Graph X-Ray plus he also runs a weekly newsletter on all things Microsoft Entra at http://entra.news. Watch the PowerShell Podcast on YouTube: https://www.youtube.com/watch?v=jpKRd-ocbH0 State of SysAdmin 2024:https://www.surveymonkey.com/r/ZSFVZ22 https://discord.gg/pdq https://github.com/PowerShell/PowerShell/releases/tag/v7.3.9 https://learn.microsoft.com/en-us/powershell/scripting/whats-new/what-s-new-in-powershell-74?view=powershell-7.3 https://idpowertoys.com https://aadinternals.com/ https://github.com/orgs/msgraph/discussions https://aka.ms/graphsamples https://graphpowershell.merill.net/ https://www.youtube.com/watch?v=R4QdFdALlA0&pp=ygUcbXJlaWxsIGdyYXBoIHRpcHMgYW5kIHRyaWNrcw%3D%3D https://aka.ms/graphpowershell https://akasearch.net/ https://www.powershellgallery.com/packages/MSAL.PS/4.37.0.0  

In this episode of the Identity at the Center Podcast, hosts Jim McDonald and Jeff Steadman dive into the world of identity standards and Microsoft Entra with their special guest, Pam Dingle, Director of Identity Standards at Microsoft. They explore Pam's identity origin story and discuss Microsoft's stance on standards. The conversation takes an in-depth look at Microsoft Entra, its target audience, and its differentiation from B2C Azure AD. AI is also a topic of discussion. Ending on a lighter note, Jim and Jeff chat with Pam about her experience renovating a Victorian house. Connect with Pam: https://www.linkedin.com/in/pameladingle/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

In this episode of the Identity at the Center Podcast recorded live at the Identity Week America 2023 conference, Jeff is joined by guest co-host Ian Glazer of Weave Identity and Steve Hutchison, Director of Security Architecture at the Mitsubishi Bank of Tokyo. The main topics discussed include Hutch's entry into the field of identity and his role as a director of security architecture, his involvement with IDPro along with Ian, the panels at Identity Week America, the latest happenings with Ping and ForgeRock, predictions for big acquisitions, the direction of Microsoft Entra, and the current buzz surrounding IDPro, including a discussion on the upcoming CIAM BOK article written by Ian. The episode concludes on a lighter note with Hutch educating us about Dungeons & Dragons. Connect with Hutch: https://www.linkedin.com/in/sehutchinson/ Connect with Ian: https://www.linkedin.com/in/iglazer/ Weave Identity: https://weaveidentity.com/ IDPro: https://idpro.org/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.