identity Archives - @thebenhanson

Home identity

August 2, 2024

From the Recorded Future Podcast: A Conversation with CISO Jason Steer About Identity Security

From my conversation with Recorded Future, two short, essential videos about identity security: how we got here, why it matters, and why it's so hard to do well.

ByBen Hanson

May 1, 2024

The Identity Lesson You Must Learn From Midnight Blizzard

Endpoint security is not the fulcrum around which you should be building. You'll miss a lot if you do.

Security

ByBen Hanson

April 10, 2024

The Missing Key To Understanding How the Midnight Blizzard Attack Worked

How does compromising an app in one tenant get you into another tenant? There is a key piece of info that will help you to understand.

Security

ByBen Hanson

March 3, 2024

Understanding the Evolution of “Tier 0” in Modern Access Control Models

Does "Tier 0" still matter? Yes and no. Yes, as a principle; No, as an access control model. Here's what to do instead.

Security

ByBen Hanson

September 18, 2023

Connect/Okta and Identity Sync Hardening

One area commonly overlooked (by defenders, but not by attackers) is identity sync infrastructure. If you harden your AD but don't do this, you are wasting your time.

Security

ByBen Hanson

July 20, 2023

What Should be the North Star for Your Career Focus?

What voice do you want to have in the world? Never, ever give yourself so fully to what you're doing now that it undermines your development into who you want to become.

Security

ByBen Hanson

February 14, 2023

When To Say No To A Good Opportunity

Sometimes an opportunity looks and feels right, but it isn't. Here's how you can tell the difference.

Security

ByBen Hanson

October 24, 2022

The Objective of Securing Privileged Access? To Protect the Business from the Admins

The most common privileged security gaps that attackers exploit come from sacrificing effective privileged admin security on the altar of operational convenience.

Security