Лютов Дмитрий

[Nathan McNulty @NathanMcNulty]

Periodic reminder that even Microsoft recommends disabling Device code flow

The primary two areas I see this used are Teams phones / Conference room type equipment and administrative CLI tools, and you should still block by default and exclude as needed

https://t.co/Xzgt5JIaJW

[Лютов Дмитрий @krizis89]

@XavierRiveraX @init1security Looks like Edge added support in 147
https://t.co/kUouy3kJw1

[Merill Fernando @merill]

🔆 Tip 👉 Did you know that Google Chrome on macOS has a built-in passkey manager?

Use it to quickly view and manage all the passkeys on your FIDO2 security keys.

[corbado @corbadotech]

For World Passkey Day, we published the Passkey Benchmark 2026.

The goal was simple: look beyond the hype and understand what passkey adoption actually looks like in practice.

3 takeaways most teams underestimate:

[Sean Metcalf @PyroTek3]

Updated my PowerShell script "Invoke-ADLabBuildOut.ps1" so it now creates AD sites, subnets, and site links (based on the created sites).

This script takes a newly built AD lab environment and makes it look like a production environment along with common security issues.
https://t.co/FmWBVVXUYN

[Matt Dancho (Business Science) @mdancho84]

Microsoft is making moves again.

A quiet little Python tool just shot to the top of GitHub’s trending charts.

100,000+ stars.

It’s called MarkItDown.

And it does something deceptively simple:

It turns almost any file into clean Markdown.

PDFs. Word docs. PowerPoints. Excel files. Images.

Drop a file in. Get structured Markdown out.

Sounds small.

It’s not.

Because one of the biggest bottlenecks in AI workflows — especially RAG systems — is getting messy, real-world documents into a format models can actually use.

And real-world documents are brutal.

PDFs are chaotic.
Word docs are full of hidden formatting junk.
PowerPoints are messy and often image-heavy.
Spreadsheets can be a nightmare to parse cleanly.

That’s where this gets interesting.

MarkItDown strips away the friction and gives you something LLM pipelines can actually work with.

In other words: less preprocessing, less pain, faster AI implementation.

Even better, this isn’t some random side project.

It’s an official Microsoft open-source tool.
Free. Commercially usable. Practical.

I tested it on a 200-page PDF.

A few seconds later, I had Markdown that was shockingly clean.

And that’s what big tech does at its best:

They take an annoying, universal problem that everyone has been duct-taping together…
and turn it into a simple standard.

That’s why this matters.

It’s not just a file conversion tool.

It’s infrastructure for the next wave of AI applications.

Get it here: https://t.co/UDzes0sbDs

🚨 Want to learn how to build + ship AI and Data Science projects (that businesses actually want)?

On April 29th, I am hosting a free workshop to help you get started with AI + DS projects in Python.

Register here (500 seats): https://t.co/ZgiybFazCD

[Sean Metcalf @PyroTek3]

If you aren't using it, it's best to disable Device Code Flow via Conditional Access:
https://t.co/6DEK4neqPP

#EntraIDSecurityTip

[Merill Fernando @merill]

🚨 The future of AI agents is HERE—but OAuth 2 needs an upgrade to keep up!

🔥 Microsoft wants to collaborate with the community to make AI agents secure, autonomous, and trustworthy.

Let’s dive into why this matters. 🧵👇

#AI #Cybersecurity #Microsoft

[Merill Fernando @merill]

@paulbendall @NathanMcNulty

[Nathan McNulty @NathanMcNulty]

And there it is - Passkey in Microsoft Authenticator!

If you'd like to set up Passkeys in Microsoft Authenticator, follow along. I'll provide a script to grab all existing AAGUIDs from your environment so we can configure this for testing without breaking existing keys :)

[Sam Erde @SamErde]

The Microsoft Entra Application Proxy Connector is updated to v1.5.3829.0 with a few improvements.

📛It is also rebranded as the Microsoft Entra Private Network Connector to emphasize its use in Microsoft Entra Private Access.

🔖See release notes FMI!
https://t.co/SRIB31yMZD

[Лютов Дмитрий @krizis89]

@jurgen_nauditt What a stupid propaganda, as typical for every person supporting ukraine

[Dr. Nestori Syynimaa @DrAzureAD]

I have questions..

[Marco Lancini @lancinimarco]

⚗️ cap

A collection of authentication Go packages related to OIDC, JWKs, Distributed Claims, LDAP.

https://t.co/k8DaCTf3sh

[Лютов Дмитрий @krizis89]

@nikize0 @unixterminal I had to move to macOS from my favorite Win11+WSL2 setup because of lack of ipv6 support and i think i'm not alone

[Лютов Дмитрий @krizis89]

@NathanMcNulty @merill @AdamFowler_IT Not only token bindings might help here but https://t.co/kb8mMbZYSF

[Merill Fernando @merill]

Check out this new doc that lists all the 🍪 cookies involved in an Azure AD authentication.
😀

https://t.co/6XQFbv7kjv

[SwiftOnSecurity @SwiftOnSecurity]

this website for understanding Linux commands you paste in is so good https://t.co/T1SoaIbXv6