Policy & LegalSANS Internet Storm Center·3 hours ago
Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)
A common thing that folks should "worry" about in Entra (or any platform really) is "who has rights to administer"&#;x26;#;x3f;&#;x26;#;xc2;&#;x26;#;xa0; Who can delete or change key things, or modify them in ways that might not be obvious (accidentally or on purpose).&#;x26;#;xc2;&#;x26;#;xa0; Yes, we trust our people, but if they&#;x26;#;39;ve moved on to other roles or to other organizations, they change from "our people" to "used to be our people".&#;x26;#;xc2;&#;x26;#;xa0;&#;x26;#;xc2;&#;x26;#;xa0;
Shasta County registrar Clint Curtis told CyberScoop he needs Peters to help manage the county’s 2026 elections and he’s not concerned about her past conviction. The post Election official says Tina Peters would be consultant, won’t have access to election systems appeared first on CyberScoop.
A new Reco report highlights a significant security gap, finding that the majority of AI tools operate without IT department oversight, creating potential vulnerability and control issues. The research underscores an emerging shadow AI problem alongside a notable increase in vulnerability disclosures related to these unsupervised deployments.
Cyber insurance losses are climbing in the US even as the number of claims declines, driven primarily by escalating privacy litigation costs according to Chubb's findings. This trend suggests that while organizations may be experiencing fewer incidents, the financial impact of each claim—particularly those involving privacy violations—is becoming substantially more expensive to resolve.
The government is concerned that hackers someday will be able to decrypt financial information and other secrets using code-breaking quantum computers.
Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th) | Threat Hunters Journal