🚨 Global Secure Access ≠ “replace VPN and done.” I just published a new podcast with Chris Brum where we break down real-world Microsoft GSA deployments 🧵👇

#ConsentFix is a great way for attackers to work around some protective layers but not all. @naunheim.cloud , @cbrhh.bsky.social and I wrote a blog post on detection and mitigations. Hope you find it useful and can adapt it to your environment. www.glueckkanja.com/de/posts/202...

Unfortunately, that was only a matter of time! This video combines two of the most dangerous tools at the moment associated with phishing - and it's surprisingly simple! www.youtube.com/watch?v=Dp1z... Do we have defense options? Read on 👇

Global Secure Access and Token Replay - a thread... Did you know that "Microsoft Entra Internet Access for Microsoft" is included in your Entra ID P1 license? -> learn.microsoft.com/en-us/entra/... 1/4

gist.github.com/CloudProtect... This one does a very good job because it considers if the device is joined/registered any only looks at the AADGraph. For this resource its not normal that a non-registered device is accessing it

I hope every SOC is monitoring incoming emails for signs of anomalous incoming mail amounts to your users. If this happens the execution of any RMM by the target user is a high alert you should follow up on.

🔊 @cbrhh and I will be part of this year's Experts Live DK with our session: The state of passkey in 2025 #ELDK2025 conference.expertsli...

Great news! 🎉 I have the opportunity to speak in March at the #eldk2025 in Copenhagen! I will do a comparison of Entra Private Access and a classic VPN solution and show why Global Secure Access is much closer to my understanding of Zero Trust Network Access. Hope to see you there!