Blocking USB Storage Does Not Block USB Security Keys
A USB storage block targets mass-storage devices. FIDO2 security keys use the Human Interface Device protocol, so they require separate endpoint and Entra ID policy design.
-
-
The Secret Trio Behind Email Security: Why SPF, DKIM, and DMARC Are Essential
Picture this: You check your phone one morning to find your inbox flooded with panicked messages. Someone’s been sending sketchy emails pretending to be your company, and now your customers are freaking out. Unfortunately, this nightmare…
-
Enable Safe Links in Microsoft Defender for Office 365
Why this matters: Phishing emails are not always obvious. In fact, many look like they came from a trusted colleague or a legitimate service you use every day. The real danger is in the hidden links.…
-
How to implement privileged time-based access controls.
Is Your Organization Handing Out Permanent Privileges to Attackers? That may sound dramatic, but every security breach involving stolen credentials shares one truth: the attacker did not need 24/7 administrative access… until they had it. The…
-
Upgrade Weak Authentication Methods Putting Your Network At Risk
Are business users still relying on insecure authentication methods like SMS, voice calls, or email one-time passwords? At DTS, we strongly recommend moving away from these vulnerable options toward stronger, more secure methods that meet the…
-
Are Your BreakGlass Accounts Protected by Restricted Admin Units?
How can Restricted Management Administrative Units enhance the security of BreakGlass accounts? BreakGlass accounts are critical for emergency access but pose significant security risks if not properly managed. By leveraging Admin Units with restricted management, you…
-
Top 3 Critical Entra ID Roles – Secure These Now!
As a Microsoft cloud security expert, one of the most common questions I get is: “What roles should we lock down first in our Entra ID environment?” My answer is always the same: start with your…
-
Device Trusted vs. Untrusted Logic Flow
This isn’t just a flowchart – it’s a mindset shift. If you’re serious about controlling access, enforcing compliance, and locking down attack surfaces, then understanding device trust is non-negotiable. This logic flow decodes how Entra ID…
-
PowerShell Security: 5 Must-Do Steps to Lock Down Your Environment Today – Part II
Welcome to Part 2 of my PowerShell hardening series. In Part 1 , I covered the fundamental steps every organization should take to secure their PowerShell environment, including execution policies, logging, and removing unnecessary modules. If…
-
What Are You Doing to Protect Critical Privileged Roles? (Part 2 of 2)
In the first part of this series ( read Part 1 ), we examined the risks associated with improper management of privileged access and the vulnerabilities it creates within an organization. We also introduced the concept…
