Synergy TPC

Somos una firma de consultoría especializada en servicios de TI enfocados en solucionar los retos de negocio y lograr una transformación digital efectiva.

[MIT CSAIL @MIT_CSAIL]

#otd in 1991 the Linux kernel was publicly released by Helsinki grad student Linus Torvalds: https://t.co/rPrtrwwd1W

[Satya Nadella @satyanadella]

It’s fantastic to be in Colombia meeting with change-makers like Pablo Arbeláez of the Universidad de Los Andes, who, along with colleagues, is showing us how AI can be a powerful tool to protect the biodiversity of the Amazon. https://t.co/loYEihXlyR

[Santiago @svpino]

The single most undervalued fact of linear algebra:

Matrices are graphs, and graphs are matrices.

Encoding matrices as graphs is a cheat code, making complex behavior simple to study.

Let me show you how!

[Merill Fernando @merill]

As part of the Azure MFA enforcement rollout, emergency accounts will now need to be registered for MFA.

You should typically avoid using MFA methods that have dependencies on other services, such as the Azure MFA service or your mobile carrier.

This leaves the following as the three most resilient MFA options:

✅ Certificate-based authentication
✅ Windows Hello for Business
✅ FIDO2 security keys

These three methods' only dependency is the core Entra authentication service, which is the same as password authentication that relies on the Entra auth service.

Now, when it comes to your emergency access account, the most likely option is to use FIDO2 security keys.

Here's why.

Windows Hello for Business (WHfB) for emergency access

Windows Hello for Business is not a viable option for emergency access accounts. It requires a device that must be frequently updated, constantly connected to the internet for the PRT to be renewed, and there are also the costs and operational overhead associated with the device.

Certificate-based authentication for emergency access

If you haven't deployed certificate-based authentication, you'll need to set it up and ensure that you use self-signed keys to avoid dependencies on external PKI/CRL infrastructure. Not to mention a smart card and card reader or some other hardware for storing the certificates.

FIDO2 security keys for emergency access

This essentially leaves FIDO2 security keys, which are simple to enable in Entra ID, require very low or no maintenance, take up little space, can be stored securely, and can be purchased for $25 retail.

PS: I've intentionally not included device-bound passkeys in Authenticator as they are currently in public preview, and you most likely don’t want to use them for your emergency access account yet.

-------------
Liked this post? Bookmark this and feel free to follow me for more tips on Microsoft Security and Microsoft Entra.

Remember to click the bell icon on my Twitter profile. This way Twitter will show you all my posts in your feed so you don't miss anything.

Please like, repost to share with others. Thanks!

[MIT CSAIL @MIT_CSAIL]

A guide to getting started in AI and ML: https://t.co/9QznpFk2DF

[vx-underground @vxunderground]

Threat Actors today wondering where the hell all their compromised hosts went

[Satya Nadella @satyanadella]

Yesterday, CrowdStrike released an update that began impacting IT systems globally. We are aware of this issue and are working closely with CrowdStrike and across the industry to provide customers technical guidance and support to safely bring their systems back online.

[ErikEJ @ErikEJ]

A new release of Entity Framework "Classic" ?? - yes sir! Version 6.5 is coming soon - learn more in my blog post
https://t.co/beUvWSvYt1
#dotnet #efcore #sqlserver #azure

[Microsoft Dev Docs @docsmsft]

Where should new developers start today? What should they learn to set themselves up for a successful career?

Scott Hanselman, @shanselman, recommends they become 'T-shaped developers'.

Learn more from Scott at #MSBuild: https://t.co/rwkWhYjHe3

#dotNET
#OneDevQuestion

[MIT CSAIL @MIT_CSAIL]

Machine learning algorithms cheat sheet: https://t.co/fN2A8ovll8

Credit: Himani Bansal

[Dave Callan | dotnet @Dave_DotNet]

Entity Framework is not slow!

You're probably just using it wrong ...

Efficient Querying ⬇
https://t.co/B0a9npAoc8

Efficient Updating ⬇️
https://t.co/cmenwvtZBt

#dotnet

[mSyke @mSykeCodes]

If you ever wanted to validate email addresses "correctly" here's the regex that matches the RFC:

[David Sanchez 🇨🇷 🇺🇸 @dsanchezcr]

GitHub certifications are now GA! These exams provide skill validation in Git and GitHub usage. These certifications are ideal for showcasing your expertise and keeping your skills updated. Don't miss out on this opportunity to boost your career! 🎓
https://t.co/RnNenB5EbD

[Microsoft Research @MSFTResearch]

A review of 2023 responsible AI work by researchers with Aether, the Microsoft advisory body for AI ethics and effects, highlights the importance of transparency in identifying, measuring, and mitigating AI harms: https://t.co/ENokgUmknr

[Miguel E Mendoza @miguelEmendoza]

GitHub Advanced Security for Azure DevOps is now generally available.

The integration with Microsoft Defender for Cloud is a winner feature to improve security governance and monitoring.

https://t.co/1SQJSGOnUA

#devops #azuredevops

[Synergy TPC @SynergyTPC]

En el #DíaDeLasMujeres abogamos para eliminar barreras para acceder el mundo digital, educar y capacitar a mujeres y niñas en STEM, permitir que las mujeres creen tecnología que satisfaga sus necesidades y eliminar la violencia de género en línea
#CerremosLaBrecha

[Microsoft @Microsoft]

Security just got simpler.

Five ways you can confront cyber threats with what you already have in your Microsoft security stack: https://t.co/ZFl5C6eauf

[Donovan Brown #BlackLivesMatter @DonovanBrown]

I just published DevOps for .NET 6.0 using GitHub Actions and Azure App Service https://t.co/nrIWkkoZ7Y

[Rapid @Rapid_API]

API security best practices 👇

{ 1 / 6 }

[Will Velida 🇺🇦 @willvelida]

As promised, I've written a blog post on how you can set up Defender for DevOps in @github Actions so that you scan your @BicepLang code for vulnerabilities: https://t.co/mRPUuvonil #DevOps #Azure