Identity controls that move under you

A 2-part series.

1. 1.
   Enrolment Is the New Perimeter

   2 November 2026·9 min read

   Attackers win the account when a credential is registered, and Microsoft's enrolment schedule gives them the pretext. Gate it before 1 February 2027.

2. 2.
   Session, Not Sign-In: What MFA Leaves Unchecked

   2 November 2026·12 min read

   MFA and Conditional Access decide at sign-in; the token lives for hours or days. What CAE, token protection and revocation cover, and what they miss.