← Back
Policy & LegalSANS Internet Storm Center·3 hours ago

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)

A common thing that folks should "worry" about in Entra (or any platform really) is "who has rights to administer"&#;x26;#;x3f;&#;x26;#;xc2;&#;x26;#;xa0; Who can delete or change key things, or modify them in ways that might not be obvious (accidentally or on purpose).&#;x26;#;xc2;&#;x26;#;xa0; Yes, we trust our people, but if they&#;x26;#;39;ve moved on to other roles or to other organizations, they change from "our people" to "used to be our people".&#;x26;#;xc2;&#;x26;#;xa0;&#;x26;#;xc2;&#;x26;#;xa0;

Read full article at SANS Internet Storm Center

Related Articles

Policy & LegalInfosecurity Magazine·6 hours ago

Four in Five AI Tools Run with No IT Oversight, New Research Finds

A new Reco report highlights a significant security gap, finding that the majority of AI tools operate without IT department oversight, creating potential vulnerability and control issues. The research underscores an emerging shadow AI problem alongside a notable increase in vulnerability disclosures related to these unsupervised deployments.

Policy & LegalInfosecurity Magazine·7 hours ago

Average Cyber Insurance Losses Increase Despite Fewer Claims

Cyber insurance losses are climbing in the US even as the number of claims declines, driven primarily by escalating privacy litigation costs according to Chubb's findings. This trend suggests that while organizations may be experiencing fewer incidents, the financial impact of each claim—particularly those involving privacy violations—is becoming substantially more expensive to resolve.

Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th) | Threat Hunters Journal