Identity Threat Detection & Response
Categories
- Active Directory Backup & Recovery (69)
- Active Directory Security (239)
- AD Security 101 (18)
- Community Tools (26)
- Crisis Management (5)
- Directory Modernization (9)
- From the Front Lines (70)
- Hybrid Identity Protection (85)
- Identity Attack Catalog (32)
- Identity Threat Detection & Response (170)
- Our Mission: Be a Force for Good (14)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (18)
- Threat Research (79)
- Uncategorized (3)
How to Secure Entra ID Workload Identities—Before AI Agent Sprawl Catches Up
- Semperis
- May 15, 2026
AI agents may be raising the stakes, but many organizations still need to secure the workload identities already operating in Microsoft Entra ID. Revisit a HIP Conf Europe session that delivers practical, technical guidance on guardrails, delegated management, threat detection, and governance—making it a smart watch for identity security practitioners.
Identity Resilience Checklist: 6 Ways to Think Beyond Backup
- Darren Mar-Elia | Principal Security Strategist
- May 04, 2026
Resilience means you can recover your identity system in a trustworthy way to a level that restores critical business functions. When evaluating any identity resilience solution, demand that your vendor meet this list of non-negotiable requirements—and prove it.
Rethinking Cyber Crisis Management: Why Plans Fail — and What to Build Instead
- Courtney Guss | Director of Crisis Management
- Mar 25, 2026
Most organizations believe they are prepared for cyber crisis management because they have incident response plans, playbooks, and tabletop exercises. But these artifacts often fail when faced with real-world complexity. Here’s what to build instead.
What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)
- Andrea Pierini
- Mar 23, 2026
Learn about the discovery of CVE-2026-26119: why it worked and why you shouldn't underestimate authentication reflection.
Hardening Entra ID Recovery and Identity Security Resilience
- Tim Springston
- Feb 24, 2026
Most identity recovery strategies primarily focus on users and groups. But in Entra ID, that’s only part of the story. After an attack, if access signals are missing or misaligned, you may technically have your users back, but you still can’t safely run the business. Take a look at how…
Semperis Acquires MightyID: Expands True Cyber Resilience Across Multi-IdP Environments
- Alex Weinert | Chief Product Officer
- Feb 04, 2026
An identity an outage anywhere can become a business crisis everywhere. And effective defense means resilience—not just prevention—so operations can continue, even under attack. Learn how Semperis’ acquisition of MightyID expands our comprehensive identity resilience across your entire identity fabric.
25 Years of AD Breaches: Three Moves to Transform Incident Response
- Semperis
- Jan 23, 2026
Active Directory is attackers’ favorite path to domain dominance. Learn how mapping your defenses to the NIST Cybersecurity Framework can improve cyber incident response and recovery.
SyncJacking: Hard Matching Vulnerability Enables Entra ID Account Takeover
- Tomer Nahum
- Jan 13, 2026
Attackers with certain privileges can abuse Entra Connect hard matching synchronization to take over synchronized Entra ID accounts.
