I deployed Microsoft Entra Prompt Shield and tested it against real jailbreak payloads on ChatGPT and Gemini. Adversarial prompts blocked at the network layer before reaching the model. nineliveszerotrust.com/blog/prompt-... #AISecurity #PromptInjection #ZeroTrust

OAuth redirect abuse in Entra ID is worth watching. New post with 4 Sentinel detections, hunting queries, and hardening steps: nineliveszerotrust.com/blog/oauth-r... #EntraID #OAuth #MicrosoftSentinel

If attestation is disabled, Microsoft will allow synced passkeys by default. One of two Entra ID changes is auto-rolling this spring. Breakdown with audit scripts and architecture guidance. nineliveszerotrust.com/blog/entra-march-2026-passkeys-ca/ #EntraID #Passkeys #ZeroTrust #CloudSecurity

Service principals can't activate PIM roles. AI agents and CI/CD pipelines get standing privilege 24/7 for tasks that take minutes. Built a Zero Standing Privilege gateway with Azure Functions. Auto-revoke, full audit trail. nineliveszerotrust.com/blog/zero-st... #ZeroTrust #Azure #AgenticAI

New post: Building a serverless edge prompt filter for LLM security Catches injection attacks + PII at the edge before semantic analysis. One layer in defense-in-depth. Full post + Terraform lab: nineliveszerotrust.com/blog/llm-prompt-injection-firewall/ #AISecurity #AWS

Microsoft’s Sentinel MCP Server went GA. Sentinel logs contain attacker-influenced fields. When AI processes this data, prompt injection becomes possible. Walkthrough on setup, attack vectors, and hardening below. nineliveszerotrust.com/blog/sentine... #MicrosoftSentinel #AISecurity #MCP

No keys to rotate. No secrets to leak. New post: Container supply chain security with GitHub Actions - vuln scanning, SBOM generation, keyless signing, and SLSA provenance. Stack: Trivy, Syft, Cosign + Sigstore. Blog + repo: nineliveszerotrust.com/blog/contain... #DevSecOps #infosec

A common Terraform misconception: sensitive redacts output, not state. sensitive=true only redacts output. Secrets still end up in state/plan files. 1.11’s write-only args fix this. Hands-on guide with AWS + Azure examples nineliveszerotrust.com/blog/terrafo... #CloudSecurity #DevSecOps

First post! Glad to be here on Bluesky. Nine Lives, Zero Trust is live. 🚀 I write about cloud security & the stuff that keeps defenders up at night. Three cats taught me nothing should be trusted, especially at 3 AM. nineliveszerotrust.com #CloudSecurity #InfoSec #ZeroTrust #DevSecOps