Sentinel Technologies’ Post

🚀 Exciting News from Microsoft Azure! 🚀 Starting July 2024, Microsoft will enforce mandatory Multi-Factor Authentication (MFA) for all Azure sign-ins. This significant step is part of our Secure Future Initiative, aimed at enhancing security and protecting your digital assets. 🔒 Why MFA? MFA is one of the most effective security measures available, blocking over 99.2% of account compromise attacks. By requiring multiple methods of authentication, we ensure that your data and identity are safeguarded against increasingly sophisticated cyberattacks. 🌐 Key Highlights: MFA will be mandatory for all Azure sign-ins, including the Azure portal, CLI, PowerShell, and Infrastructure as Code (IaC) tools. This enforcement will be rolled out in phases, starting with the Azure portal in July 2024 and extending to other tools in early 2025. Our commitment to security is part of a $20 billion investment over the next five years, ensuring that all user accounts and applications are protected with securely managed, phishing-resistant MFA. 📅 What You Need to Know: Global admins will receive notifications 60 days in advance of the enforcement date for their tenants. A grace period will be available for select customers who need additional time to prepare for the MFA requirement. Let's work together to create a more secure digital future! 🌟 Microsoft #Azure #MFA #CyberSecurity #SecureFuture

Effective 15 October 2024, Azure customers will need to ensure that all users utilize multifactor authentication (MFA) to access the Azure portal, Microsoft Entra admin center, and Intune admin center. To maintain seamless access, please enable MFA for your users by this date. If you are unable to enable MFA by 15 October 2024, you will need to apply for a postponement of the enforcement date. Failure to either enable MFA or apply for postponement by this deadline will result in users being prompted to set up MFA when accessing the Azure portal, Microsoft Entra admin center, or Intune admin center. #azure #cybersecurityawareness #cybersecurity #digitaltrust #mfa #passwordsecurity #infosec

🚀Learn about the tools and services Microsoft provides that help keep you safe! Module 1 starts JULY 10 🕘 9:00AM-11:00AM CDT 💻 MASTERING MICROSOFT 365 SECURITY with Michael Van Horenbeeck! #M365 #EntraID #MSAzure #Windows11 #ViaMonstraAcademy Enroll here! https://ow.ly/CueE50Sq0C2 This LIVE Online Training is for YOU if you want to: ✅Gain Better Understanding of Microsoft 365 Security and Microsoft Defender ✅Implement Microsoft Entra ID Identity Protection ✅Secure Endpoint Devices and Establish Security Baselines ✅Identify Potential Risks and Effectively use Threat and Vulnerability Management ✅Gain Insight into Cloud Access Security Broker (CASB), Microsoft Defender for Cloud Apps (MDCA), and Microsoft Sentinel

Starting in July 2024, Microsoft will implement a new security measure by requiring Multi-Factor Authentication (MFA) for access to the Azure portal. By 2025, script access to the portal will also require MFA. Please note that this change will not affect access to applications hosted in Azure. Additionally, this update will impact the administrative interfaces to Azure, including EntraID. As a result, your Break Glass Account (BGA) will no longer work without MFA authentication. As I am working on some of the best practices for the BGA, here something: - Enable FIDO2 in Entra ID Authentication Methods; - Purchase two FIDO2 hardware keys such Yubico Yubikeys; - Login with your BGA(s) and visit https://aka.ms/mfasetup in an in-private browser. - Register both keys and register a PIN against them. - Store the PIN offline and the passkey elsewhere securely. This now becomes your BGA. Do not use online password manager, especially that which requires SSO with Entra (as it won't work in case of an issue). - Activity Monitoring: Use Azure Log Analytics and Sentinel to monitor sign-in and activity logs of BGA accounts. Create alert rules to notify administrators of any sign-in attempts or changes; - Alerts and Incident Response: Configure alerts for activities like successful and failed logins, account lockouts, role changes, etc., and ensure notifications are sent to a distribution group that includes the CISO, CEO, and CTO; - Routine Checks: Conduct periodic reviews of the BGA configurations and perform regular tests to ensure the accounts work as expected. Validate access procedures, monitoring setups, and response protocols; - Document Procedures: Clearly document procedures for accessing and using the BGA accounts, making them accessible to authorized personnel (CISO, CEO, CTO) with step-by-step instructions. #breakglassaccount #infosec #cybersecurity #disasterrecovery #cyber #yubikeys #entraid #azure #cloud #cloudsecurity #azuresecurity

🚀Learn about the tools and services Microsoft provides that help keep you safe! Module 1 starts JULY 10 🕘 9:00AM-11:00AM CDT 💻 MASTERING MICROSOFT 365 SECURITY with Michael Van Horenbeeck! #M365 #EntraID #MSAzure #Windows11 #ViaMonstraAcademy Enroll here! https://ow.ly/hPu750Sq0C3 This LIVE Online Training is for YOU if you want to: ✅Gain Better Understanding of Microsoft 365 Security and Microsoft Defender ✅Implement Microsoft Entra ID Identity Protection ✅Secure Endpoint Devices and Establish Security Baselines ✅Identify Potential Risks and Effectively use Threat and Vulnerability Management ✅Gain Insight into Cloud Access Security Broker (CASB), Microsoft Defender for Cloud Apps (MDCA), and Microsoft Sentinel

DID YOU KNOW???? Did you know that with Hybrid Identity, taking a synced user out of sync scope and then restoring it from the soft deleted state in Entra ID results in a dummy user rather than a cloud-only user? The only recommended way to make a synced user a cloud-only user is to break sync i.e. that is turn off directory synchronization. https://lnkd.in/d5yuThFq When you disable directory synchronization, all on-premises attributes for the synchronized user are removed from Entra ID without the need to contact Microsoft Support. This is a huge relief for cloud security engineers, IAM administrators, and others who have previously used on-premises SAM-Account-Name or other on-premises attributes for applications authentication and would like to reverse the modifications. Tested and confirmed.   #EntraID #EntraConnectSync #AzureADConnect #CloudSecurity #ActiveDirectory #IAM #CyberSecurity #Microsoft #EntraCloudSync #Infosec #DirectorySynchronization #MIM #PeerSpot #AzureSecurity #Infosec 

Vote for CloudCover Guardian for Azure in the SDC Awards and help virtualDCS win for the third consecutive year! 🏆   You're already protecting Microsoft 365 data, but what about the configurations that bind it together? With CloudCover Guardian for Azure, you can track and recover your Microsoft 365 environment, including Entra ID, Intune, Exchange, SharePoint configurations, and more.   Read more about our entry and vote for virtualDCS here - https://lnkd.in/eZC6M2Ch #SDCAwards #CloudCoverGuardian #Microsoft365 #Cybersecurity #DataProtection #BusinessContinuity #DisasterRecovery

🚨STARTS WEDNESDAY!!! 🚀Learn about the tools and services Microsoft provides that help keep you safe! Module 1 starts JULY 10 🕘 9:00AM-11:00AM CDT 💻 MASTERING MICROSOFT 365 SECURITY with Michael Van Horenbeeck! #M365 #EntraID #MSAzure #Windows11 #ViaMonstraAcademy Enroll here! https://ow.ly/JLxU50SwC2a This LIVE Online Training is for YOU if you want to: ✅Gain Better Understanding of Microsoft 365 Security and Microsoft Defender ✅Implement Microsoft Entra ID Identity Protection ✅Secure Endpoint Devices and Establish Security Baselines ✅Identify Potential Risks and Effectively use Threat and Vulnerability Management ✅Gain Insight into Cloud Access Security Broker (CASB), Microsoft Defender for Cloud Apps (MDCA), and Microsoft Sentinel

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures [mostly in the cloud] https://lnkd.in/gUv9RrGy This is one of the risks of outsourcing security to a cloud provider. You are just one tenant among thousands. Cloud provider networks are some of the highest value High Value Targets. A compromise of the cloud provider's identity systems or control plane can result in the compromise of the tenants' VMs and data. Staying on-prem can be more expensive, but you greatly reduce your dependencies on others. You can manage security risks as you see fit. *PowerShell DevSecOps at the SANS INSTITUTE* Starting 10.June.2024 I will be teaching my six-day "Securing Windows and PowerShell Automation (SEC505)" course online in the U.S. Central Time Zone, streaming over the internet. This course is for those who mainly work on-prem and need PowerShell infosec automation. SEC505 will prepare you to pass the GCWN certification exam too. See the course outline here: https://lnkd.in/e4PrZWys And if your managers think the cloud is always more secure, forward a copy of the link above to them and ask about the "cascade" of infosec failures in the Microsoft cloud. #InfoSec #Security #PowerShell #SEC505 SANS Institute SANS Cyber Defense