Get ready, folks. 🌟 You’re about to witness ONE. BIG. BEAUTIFUL. ABSURDLY. EPIC. THREAD. 🧵🔥 Some say this might be the MOST EPIC and MOST RIDICULOUSLY LONG identity thread ever written 📗 Bookmark this Honestly… the cover image alone deserves a like + retweet DO IT 😂

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-gl...

I love passkeys in Microsoft Authenticator, but rolling them out with Compliance and/or App Protection Policies has not been as easy as it should be... But I have good news - we can create a better experience without introducing significant gaps :)

Improving passkey registration experiences

Lets see what we can do about minimizing passkey deployment issues with Compliance and App Protection Policy requirements :)

nathanmcnulty.com

Folks, bookmark this 👇 Did you know I curate a list of all the awesome Entra related links all in one place? Here's a quick peak into this list

The NIH’s 2024 budget of just under $37B generated $95B in economic activity in 2024 alone. 99.4% of new pharmaceuticals approved from 2010-2019 came from NIH-funded research. I’m hard pressed to think of anything that generates as much direct economic benefit as our NIH did before they destroyed it

Aaron Rupar@atrupar.com · last yr.

TAPPER: 14 Republicans say you're risking undermining critical research by holding up NIH funding VOUGHT: If they were a company, their stock price would in shambles. They in some respects caused the pandemic. You have an entire institute that does nothing more than DEI research at the NIH.

This looks like an awesome free tool from Microsoft to help guide an organization through a zero trust assessment, and to help keep track of your progress. #cybersecurity From: @merill https://infosec.exchange/@merill/114828836541804825

Merill Fernando :verified: :donor: (@merill@infosec.exchange)

Attached: 1 image Microsoft just dropped a banger spreadsheet to help you level up your security! 🚀 It's a FREE Zero Trust assessment tool with a clear roadmap covering SIX key pillars. Let's break it down! 👇 👥 Identity 📱 Devices 📊 Data 🌐 Network 🏗️ Infrastructure 🕵️‍♀️ Security Operations

infosec.exchange

🔥 OBAMA: “IMAGINE IF I HAD DONE ANY OF THIS… I say this not on a partisan basis. This has to do with something more precious — who are we as a country, and what values do we stand for?” 🇺🇸

Threat hunters rejoice! This is HUUUGE news 👏 Microsoft just introduced linkable identifiers in Microsoft Entra ID logs. The bad guys 🥷 are going to hate this so much 😂 Learn more at learn.microsoft.com/... Share the good news 👍

"18F was explicitly designed to serve as an in-house consultancy that would allow federal agencies to leverage private-sector expertise. As part of DOGE’s sweep, however, it has gutted the group, putting a pause on several ongoing projects to make government services more efficient for users."

‘It’s a Heist’: Real Federal Auditors Are Horrified by DOGE

WIRED talked to actual federal auditors about how government auditing works—and how DOGE is doing the opposite.

wired.com

Israel Ranked 8th Happiest Country theonion.com/israel-...

Folks, if you're in IT and don't fit the classic stereotype of white, middle-class guy, you might be eligible for a year's access to the O'Reilly learning platform for free (highly recommended - I use it all the time to dive into tech books). Apply here: www.oreilly.com/diversity/sc...

DEI Scholarship Program - O'Reilly Media

To help members of groups underrepresented in technology develop and sharpen the skills needed to break through barriers within the field, we're offering 500 annual scholarships giving recipients full...

oreilly.com

As the Gaza body count increases, I wonder how all these supposed 'leftists' & self-styled 'contrarians' who berated me for not applauding Trump for bringing about a 'ceasefire' and 'peace' feel today. Like fools, I hope. Because they are indeed fools: they believed Trump.

I know the What-If API has been here for a while, but I haven't seen it documented yet. Anyway, in case it's helpful to anyone, you can do What-If analysis via API ;) Invoke-MgGraphRequest -Method POST -Uri '/beta/identity/conditionalAccess/analyze' -Body $body

Level Up Your App Governance With MDA Workshop Series techcommunity.micros... #MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

Level Up Your App Governance With MDA Workshop Series | Microsoft Community Hub

Over the past two years, there has been a significant increase in nation-state attacks leveraging OAuth apps. These attacks often serve as entry points for...

techcommunity.microsoft.com

This is what happens when 18F goes away: beta.weather.gov has been deactivated, “due to the loss of critical federal staff, which leaves this project without the resources to continue its development or for routine monitoring and maintenance.” 18f.org/projects/#:~...

There it is: Speaker of the House says Elon has already started running your Social Security through his AI.

Aaron Rupar@atrupar.com · last yr.

Mike Johnson on Elon Musk: "We meet late into the night in his office and we've looked at that. What he's finding with his algorithms crawling through the data of Social Security system is enormous amounts of fraud, waste, and abuse."

18F was doing exactly the type of work that DOGE claims to want – yet we were eliminated shortly after midnight. Read our letter to the American people: 18f.org

The derogatory term “rubio” now has three meanings in American slang: 1) A spineless lump of nothing 2) The piece of shit you scrape off the bottom of your shoe 3) A person with no scruples or sense of morality Example: “Don’t be such a fucking rubio — just think of what your mother would say.”

Stephanie Kennedy@wordswithsteph.bsky.social · last yr.

As of today, a new term has entered our language. A “rubio” is a spineless lump of nothing. Example: Don’t be such a rubio.

PLEASE RP: Windows Server 2025 Delegated Managed Service Accounts Delegated Managed Service Accounts (dMSA) are a new type of managed service account introduced in Windows Server 2025. They offer several advantages over traditional service accounts and Group Managed Service Accounts (gMSA).

The world’s richest man appears to be dismantling the government with an eye toward consolidating power and punishing his political enemies, Charlie Warzel writes. Will it work? theatln.tc/zoCxaorI

⚡ Check out this new Microsoft Entra blog post 👇 Top 3 Priorities for Proactive Identity and Access Security in 2025

Top 3 Priorities for Proactive Identity and Access Security in 2025 | Microsoft Community Hub

In 2024, we faced some serious security challenges. We dealt with widespread cybersecurity issues like major breaches, outages, and persistent threat...

buff.ly

huh...

I just published this week's Entra newsletter! Featuring @ciraltos.bsky.social, @danielbradley.bsky.social, @savilltech.com, @tonyredmond.bsky.social and more! Read at ➡️ entra.news/p/entra-news...

Entra 🆔 News #80 → This week in Microsoft Entra

Get the latest details on the Azure AD Graph 💎, Azure AD + MSOnline PowerShell module retirements 🍭, and other Entra news from this week! 🪄🌈🦄

entra.news

A recent LinkedIn post covered how to use #PowerShell to assign #Microsoft365 Group ownership to an account before deleting the original owner. The code works, but it's very slow. Here's how to do the job much faster with the Graph SDK: office365itpros.com/2025/01/20/r...

How to Replace Group Owners with PowerShell

Deleting an Entra ID user account can result in ownerless groups. Before deleting accounts, it's a good idea to replace group owners.

office365itpros.com