24 - Microsoft Graph scopes giving attackers high hopes

Microsoft 365 E7 is going into GA May 1st - but what's in the box, what's in the box?! 

Many organizations are looking at their cloud environments, wondering whether parts of it should be moved back on-premises or to other cloud providers. What are the options, really? And is what is Microsoft 365 Local? Let's find out!

In this episode we talk about how managed identities and federated credentials can help you eliminate all client secrets in your environment. Hopefully, after this episode, you'll never create a client secret again!

In this episode we talk about what has been on everyone's lips lately; DeepSeek. What's happening in the GenAI world in general, and will we see more situations DeepSeek-like situations going forward?

Interested in a summary of what Microsoft announced at Ignite this year? Look no further, we got you covered!

In this episode we discuss our favorite topic of all; licenses! More specifically Entra licensing. Did Marius win the bet of whether Global Secure Access would be included in Entra ID P2 or not? And is the Entra Suite license actually decently priced? Find out that and more in this episode of the Cloudfirst Podcast!

In this episode we talk about news from Google Next, Entra External ID, Passkeys and Copilot for Security. Is Entra External ID, which will be GA in two weeks, ready to replace Azure AD B2C? How do passkeys really work? And, who is Copilot for Security really for?

In this episode we talk about the Midnight Blizzard attack on Microsoft, which turns into a rather detailed discussion on Microsoft Graph scopes and their wide permissions. Also, how many Copilot products does Microsoft have now? And how hyper-scale is Azure really? 

As it has been a while since last episode, there is a lot of news to cover!- The final details about Storm 0558 has been published- Microsoft and Oracle Expand Partnership to Deliver Oracle Database Services on Oracle Cloud Infrastructure in Microsoft Azure- Microsoft Fabric- Microsoft 365 Copilot in GA November 1st- Bicep support for Entra ID- Azure Updated Manager GA- Delegate Azure RBAC assignments with conditions- Azure VNET Flow Logs- Terraform licensing and OpenTOFU- Entra ID Device-bound passkeys as an authentication method (Said syncable passkeys in the Episode, which is not correct, sorry about that!)And more... :) Enjoy!

In this episode we talk about the new Entra ID inbound provisioning API, the recent developments in a few Microsoft security issues and the recent 0-day utilized to attack the Norwegian government through MobileIron.