Identity Roundtable

Eric Woodruff, Ru Campbell, and Thomas Naunheim are joined by guest Sapir Federovsky (Wiz/Google Cloud) to talk identity attacks in the wild.Sapir breaks down her Troopers research on Entra ID service principal abuse: phished OAuth consent grants, leaked application secrets, and the GitHub supply-chain attacks fueling them (compromised NPM packages, stolen personal access tokens, and what happens when those secrets end up in the wrong hands).The crew also dives deep into device code phishing — now one of the most common initial access techniques against Entra ID — and the shocking stat that fewer than 40% of tenants even have a policy to block it. They cover practical mitigation strategies (Conditional Access, Access Packages, phased rollouts), why agentic AI coding tools keep defaulting to device code flow, and lingering on-prem-to-cloud risks like orphaned synced service accounts.Plus: a candid conversation on the mystery actors behind mass phishing-kit campaigns like the "railway" attack.🎙️ Guest: Sapir Federovsky (Wiz / Google Cloud)🎧 Hosts: Eric Woodruff, Rue Campbell, Thomas Naunheim#Entra #IdentitySecurity #Microsoft365 #CloudSecurity #Phishing #GitHubSecurity #ConditionalAccess #Troopers

Are your Microsoft Conditional Access policies as secure as you think, or have they been turned into Swiss cheese? Following our premier episode on passkeys and tenant governance, Episode 2 of the Identity Roundtable dives straight into the weeds of identity red teaming. We are joined by Fabian Bader, a Cybersecurity Architect at glueckkanja and Microsoft Security MVP, to explore his research into Microsoft Entra and Conditional Access bypasses. Fabian reveals the surprising, behind-the-scenes token flows and undocumented API behaviors that allow attackers to quietly slip past your defenses - often using the very exclusions and documentation Microsoft provides.

In the very first episode of Identity Roundtable, we kick things off from the Microsoft MVP Summit with a candid, unscripted conversation on where identity is heading.

We dive into the realities of passkey: the promise, the pitfalls, and the trade-offs most people don’t talk about. From synced vs. device-bound credentials to attestation and real-world adoption challenges, nothing is off-limits.

We also explore the evolving world of multi-tenant identity, including Microsoft Entra’s new tenant governance capabilities, and what they mean for security, control, and architecture in modern environments.

Expect sharp insights, practical experience, and a few honest disagreements just like the conversations that inspired this podcast.