The topic of security accompanies us in IT, at home and especially within Microsoft 365 in every area and tool.
Recently, Microsoft released details about a new phishing attack technique called Device Code Phishing. This method, used by the threat actor Storm-2372, exploits the Device Code Authentication Flow, which is commonly used by devices without keyboards such as Microsoft Teams...
I always hated Smart Cards and called them legacy tech. But recently, I stumbled upon a very good use case. Have you ever tried typing in your password or using your FIDO2 key with gloves on? Yep, not that funny....
In today's increasingly mobile and remote work environment, organizations are facing new challenges in securing access to their sensitive data and administrative portals. One of these challenges is the risk of token theft. Tokens are cryptographic keys that allow users...
Within the organizational network, traffic is usually monitored by an internal firewall. However, if the device is outside the "four walls" and no VPN, proxy or third-party tool is used to monitor Internet traffic, the end user can move freely...
Since the Print Nightmare updates last year (2021), a lot has changed in the distribution of printers. This has to do with the fact that Microsoft has introduced additional protection mechanisms for prevention. To ensure that the distribution and installation...
Finally! The server licensing for the business line is there and is called "Defender for Business Servers". The onboarding as well as the configuration can be done in the same way as with Defender for Server.I have summarized the options you...
With the "Hybrid Cloud Trust Deployment" it is finally possible to log on to local / on-premises resources with Windows Hello (face, PIN, key) without much effort. This was previously only possible with great effort and in connection with a...
Microsoft 365 or Azure AD offers the option of using a hardware token with the OATH TOTP standard for MFA instead of the authenticator app. A hardware token is just an alternative option to the classic popup on mobile. Likewise,...
In a previous article on YubiKey Bio, I explored a method for users to sign in "Passwordless" without a PIN. This article delves into the variant of a passwordless deployment, utilizing the affordable "Yubico Security Key" (~$25) for Microsoft 365/Azure...
Introducing the YubiKey Bio, a FIDO2 key revolutionizing passwordless authentication for Microsoft 365/Azure AD and Windows devices. Take a leap toward a "Passwordless" future, especially beneficial for production personnel. Yubico, with its YubiKeys, provides diverse avenues to explore passwordless environments....
