AppGov Score Blog

Backup applications are designed to protect your data, but when over-permissioned, they can become high-value targets for threat actors. I’ve been...

In Microsoft Entra ID, enterprise applications without assigned owners, often referred to as "ownerless apps" pose significant risks to...

In today’s enterprise environments, Microsoft Entra ID is at the heart of access, identity, and application connectivity. But with hundreds or...

In part 1 of this blog series, we discussed what workload identities are, their risks, and the consequences they cause if not monitored. In this blog...

On June 17th, in its Message Center, Microsoft announced a major upcoming change in the context of its Secure Future Initiative (SFI) that has a high...

Introduction: The New Frontier of Cloud Security

In Microsoft Entra ID, enterprise applications and app registrations are critical components for managing access to SaaS applications, internal...

In today’s cloud-first world, Microsoft Entra ID (formerly Azure Active Directory) is the backbone of identity and access management for...

What has the world come to when "service" accounts can be compromised? It's no longer just someone's identity that gets exploited; the "unattended"...

As part of our “Biomarkers” episode, Nic and I added more acronyms to our R.E.A.D. phrase. This time it’s A.R.R., and if you watched the episode, Nic...