Merill Fernando :verified: :donor:
merill@infosec.exchange
<p>Product Manager <span class="h-card" translate="no"><a href="https://infosec.exchange/@microsoft" class="u-url mention">@<span>microsoft</span></a></span> | entra.news CxP <a href="https://infosec.exchange/tags/identity" class="mention hashtag" rel="tag">#<span>identity</span></a> <a href="https://infosec.exchange/tags/entra" class="mention hashtag" rel="tag">#<span>entra</span></a> <a href="https://infosec.exchange/tags/graphpowershell" class="mention hashtag" rel="tag">#<span>graphpowershell</span></a><br />Dad • Dev • He/Him • 🇦🇺 • 🇱🇰 • Wurundjeri Country • Toots are my own. <span class="h-card" translate="no"><a href="https://infosec.exchange/@merill" class="u-url mention">@<span>merill</span></a></span> on Twitter</p>
Posts
-
Post #4356817
🚨 Entra Conditional Access gotcha from Andres Canello Selecting every device platform ≠ “Any device.” An attacker can spoof the browser user-agent, get no platform match, and that CA policy condition won’t apply. Watch Entra.Chat with for more nuggets 👇 https://entra.news/p/the-ultimate-microsoft-entra-global
-
Post #4215737
Insider Risk Is a Business Decision - Bring HR In Early
-
Post #4189610
🚧 Folks, we’re planning a major architecture change for Maester 3.0: a native test model with structured metadata, simpler contributions, centralized prerequisite handling, and compatibility for existing Pester tests. We want your feedback before finalizing the design 👇 https://github.com/maester365/maester/discussions/2050
-
Post #4163462
I’ll be honest. Purview has always felt like someone else’s part of the Microsoft security stack. I’m an Entra person. Ray Reyes isn’t, and that’s why I wanted him on Entra.Chat The lines between our products and teams are disappearing.
-
Post #4149772
Folks, Maester 2.2 is here!! It was just a couple of months ago when we launched Maester 2.0 and the amazing Maester community has been SUPER busy.
-
Post #4122261
We just sent out the latest Entra News for the week. Check it out! https://entra.news/p/entra-news-159-this-week-in-microsoft
-
Post #4085060
Putting the final touches on the upcoming 🔥 Maester 2.2 release and look at this! A new Contributors page dedicated to the awesome community of folks that make Maester what it is today. Check it out and click through to the detail page of each author. maester.dev/contributors
-
Post #4081653
👋 Check out this new Microsoft Entra blog post 👇 What's New in Microsoft Entra: July 2026 https://techcommunity.microsoft.com/t5/microsoft-entra-blog/what-s-new-in-microsoft-entra-july-2026/ba-p/4534631
-
Post #4055174
👋 Check out this new Microsoft Entra blog post 👇 Modernize SAP Identity Management with Microsoft Entra https://techcommunity.microsoft.com/t5/microsoft-entra-blog/modernize-sap-identity-management-with-microsoft-entra/ba-p/4528596
-
Post #4002417
👋 Check out this new Microsoft Entra blog post 👇 Microsoft Entra ID enhances security of branded sign-ins https://techcommunity.microsoft.com/t5/microsoft-entra-blog/microsoft-entra-id-enhances-security-of-branded-sign-ins/ba-p/4537471
-
Post #3995425
👋 Check out this new Microsoft Entra blog post 👇 Secure AI, web, and private apps with Zero Trust https://techcommunity.microsoft.com/t5/microsoft-entra-blog/secure-ai-web-and-private-apps-with-zero-trust/ba-p/4516387
-
Post #3978030
👋 Check out this new Microsoft Entra blog post 👇 Plan your Azure AD B2C migration with the Migration Policy Analyzer https://techcommunity.microsoft.com/t5/microsoft-entra-blog/plan-your-azure-ad-b2c-migration-with-the-migration-policy/ba-p/4532874
-
Post #3970286
I was explaining how Microsoft Entra Staged Rollout works and realised it would make a great video especially the under-the-hood details that aren’t in the docs. A quick 7-minute walkthrough is coming soon. What would you like me to cover? 👇
-
Post #3943081
Huge Entra News this week. Microsoft announced plans to phase out SMS and Voice from Entra and passkeys becoming the default. 1/3
-
Post #3851455
👋 Check out this new Microsoft Entra blog post 👇 AI agents are everywhere. Are your access controls ready? https://techcommunity.microsoft.com/t5/microsoft-entra-blog/ai-agents-are-everywhere-are-your-access-controls-ready/ba-p/4531379
-
Post #3752781
One compromised Agent ID blueprint can become a multitenant blast radius. That is the most important idea in my latest conversation with Katie Knowles, Senior Security Researcher at Datadog, about her three-part security analysis of Microsoft Entra Agent ID. Watch or listen: https://entra.chat
-
Post #3707945
Me teaching Entra Workload ID Federation to Sol. Fable made the same mistake too. All those badly coded auth code is tripping up the LLMs. For reference this is the article I linked to https://devblogs.microsoft.com/identity/access-cloud-resources-across-tenants-without-secrets/
-
Post #3602290
👋 We just sent out this week's Entra newsletter. Check it out at https://entra.news/p/entra-news-156-this-week-in-microsoft
-
Post #3438599
👋 Folks "passkeys won't save you." Vince Smith, who leads Agent ID at Microsoft Entra, explains why: squeeze one end of the balloon (users) and attackers move to the other 👉 NHI + workloads. New Entra Chat 👇 https://entra.news/p/from-windows-core-to-leading-agent
-
Post #2278232
I built a fun little side project called Yako. It started because I got sick of opening a new tab and immediately seeing ads, news, clickbait, and distractions. I just wanted a calmer start page. So I made one for Microsoft users and admins. Introducing getyako.com 1/3
-
Post #2278231
👋 Check out this new Microsoft Entra blog post 👇 You can’t govern what you can’t see: Closing the identity visibility gap for apps https://techcommunity.microsoft.com/t5/microsoft-entra-blog/you-can-t-govern-what-you-can-t-see-closing-the-identity/ba-p/4507464
-
Post #2278230
👋 Check out this new Microsoft Entra blog post 👇 SASE 101: How to get started with secure access in a cloud-first world https://techcommunity.microsoft.com/t5/microsoft-entra-blog/sase-101-how-to-get-started-with-secure-access-in-a-cloud-first/ba-p/4516005
-
Post #2278229
🦊 Firefox users, this one’s for you. Graph X-Ray now supports Firefox! 🎉 The latest release also adds: ✅ PowerShell generation with Invoke-MgGraphRequest ✅ REST mode for raw request URLs ✅ Better filtering and request counts ✅ Improved batch request handling 1/2
-
Post #2278228
👋 Check out this new Microsoft Entra blog post 👇 Lock down AI, web, and private apps: what’s new in Internet Access and Private Access https://techcommunity.microsoft.com/t5/microsoft-entra-blog/lock-down-ai-web-and-private-apps-what-s-new-in-internet-access/ba-p/3847825
-
Post #2278227
New Entra Chat episode is out! AI agents are being created across your tenant... But who is checking if they are configured securely? In this episode, Sam Erde and I dig into the Maester 2.1 release 🎙️ https://entra.news/p/how-to-secure-copilot-agents-azure
-
Post #2278226
👋 Have you checked out this week's Entra.News? Get the latest at https://entra.news/p/entra-news-147-this-week-in-microsoft
-
Post #2278225
👋 Here's a quick birds eye view of Microsoft Agent 365 licensing Enjoy! Disclaimer: I'm not a licensing person. Please refer to the official licensing FAQ for details https://www.microsoft.com/licensing/faqs/122
-
Post #2278224
👋 Check out this new Microsoft Entra blog post 👇 Build a secure identity foundation: 5 webinars to strengthen access management with Microsoft Entra https://techcommunity.microsoft.com/t5/microsoft-entra-blog/build-a-secure-identity-foundation-5-webinars-to-strengthen/ba-p/4515965
-
Post #2278223
👋 Folks cybersecpods.com is live! It's the home of cyber security podcasts, a place to explore and find podcasts for all of us in cyber. It's open source and crowd sourced, if I'm missing any please add them.
-
Post #2278221
Unboxing my new toy. Qwen 3.6 here I come!