👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Passkeys, passkeys, passkeys. The message center is full of them again this week. We’ve rounded them up below, plus posts from the community breaking down what each one actually means for your tenant.
And don’t miss this week’s episode. Sam Erde and Michael Soule joined me to talk Active Directory security testing in Maester 2.2.
Active Directory Security Testing in Maester 2.2
Active Directory is not dead. It is nearly thirty years old, Microsoft is still shipping new capabilities and new telemetry for it, and most of the forests running today will outlive the people currently administering them. What has changed is that you can now test it the same way you test your cloud tenant.
Enjoy!
Sponsored by:
Announcing AI Red Team Tactics for M365, Copilot & Enterprise AI (AltSec CAIRTP)
Altered Security’s CAIRTP is a beginner friendly course designed for information security professionals looking to attack and secure AI across Microsoft 365 and Azure environments.
Course Highlights:
Attack & defend Copilot & Agent Identities
Abuse Agent Attack Surfaces in the Microsoft AI ecosystem
Practice advanced attacks beyond prompt injection
Abuse AI Identities & evade AI guardrails
Perform hands-on attacks in real-world scenarios
Participants who complete the course and pass the exam can earn the Altered Security Certified AI Red Team Professional (AltSec CAIRTP) certification.
Key Dates & Information:
Live Bootcamp Starts: November 20, 2026 (4-Week Duration)On-Demand Course: Planned for mid-December 2026
⚡️ Microsoft
🔥 Public Preview
Migrate to Microsoft Entra Cloud Sync with the migration tool
Public preview of self-service onboarding for new Microsoft Entra App Gallery applications • Hilda Kinyunyu
Simplify Employee Identity Lifecycle with HiBob and Microsoft Entra • Udi Milo
📖 Read
From guidance to action: Security fundamentals that materially reduce risk • Ron Pessner
Replace VPN access with identity-driven security • Sule Tatar
🗣️ Message Center
Sponsored by:
Turn Entra ID App Risk Counts into a Fix List
The free AppGov Score tells you how many risky applications are in your Entra ID tenant (among 24 other risk checks). But a number alone does not tell you which apps or configurations need attention.
With a 7-day AppGov Accelerator trial from ENow, you can see the named applications behind those risk counts, the permissions they hold, and the governance context you need to prioritize remediation. You’ll also gain access to:
Daily tenant scans to track progress and changes 📈
Expanded visibility and dashboard access ➕
Alerts for client secrets and certificate expirations ⚠️
Start your trial by obtaining your AppGov Score and scheduling a quick activation call. Request your Score today!
From the community…
🚀 Most popular posts from last week
🥇 New feature in PIM - fire custom extensions on role activation • Stian A. Strysse
🥈 Entra ID Continuous Access Evaluation and Microsoft 365 • Tony Redmond
🥉 Microsoft Entra expands passkey registration campaigns • Daniel Bradley
☀️ Learn
👩✈️ AI & Copilot
Entra Auth Tracer + WebMCP – Letting an AI Agent Debug Your Authenticaiton Traffic • Darren Robinson
📺 New Agent 365 controls for Microsoft admins • Microsoft Mechanics
🧰 Workload ID
Reading Microsoft Entra ID Groups Across Tenants with a Managed Identity as a Federated Credential • Constantin Hager
🌐 Private Access & Internet Access (GSA)
Entra Internet Access • Michael Frank
Locking down PAWs internet access when GSA drops • Christian Friedel-Jain
📦 Apps
Active Directory Security Testing in Maester 2.2 • Merill Fernando
Authentication
Microsoft delays Entra SMS and voice retirement dates • Daniel Bradley
Finally a smooth(er) passkey onboarding experience in Microsoft 365! • Jan Bakker
📺 Already Have WHfB? Why Entra Wants a Passkey Anyway! • Azure Brother
👥 User & Group Management
Microsoft adds basic permissions for groups in Graph • Daniel Bradley
🤖 DevOps & PowerShell
🚦 Conditional Access
Building a Modern Conditional Access Strategy: The Identity Firewall Your Organization Actually Needs • Colby Pryor
🖥️ Devices
📺 Hybrid Explained: Your Domain PCs Can Run Intune • Jonathan Edwards
🥷 Security
Cached Token Theft: Extracting Azure and Microsoft Graph Refresh Tokens from the macOS Keychain via PowerShell • Thomas Naunheim
Continuous Access Evaluation: Is it really tho? | CirriusTech • Graham Gold
📺 This Simple Entra ID Change Can Reduce Your Attack Surface • Rio Hindle
♻️ Sync
Microsoft Entra Connect Sync – Passwordless Authentication is now GA, plus the new Entra Connect Migration Tool is here! (v2.6.91.0) • Michael Morten Sonne
📺 Hybrid Identity Deep Dive: Microsoft Entra Cloud Sync Writeback to Active Directory • Colby Pryor
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.