Resources

Microsoft Entra Conditional Access sits at the front line of identity security—but as features multiply, so do subtle misconfigurations. Brandon Colley, TrustedSec Senior Security Consultant, highlights real-world lessons from engagements where attackers abused Conditional Access logic flaws, weak conditions, and incomplete MFA coverage to slip past defenses.

In this episode, Andre explains why the gap between identity security awareness and actual maturity is growing every day, and how AI is making it faster and easier for attackers to find the weaknesses organizations already know they have. He breaks down why recovery is the most underestimated phase of the NIST cybersecurity framework and what it really costs when organizations haven’t prepared for it.

Evgenji Smirnov walks through Microsoft’s 2026 shift away from RC4 in Kerberos and what that means for Active Directory teams. He breaks down why RC4 is being phased out, which services and legacy configurations are most at risk for disruption, and practical steps to take now to avoid authentication issues and strengthen security.