Security News > 2024 > February > How to Apply Zero Trust to your Active Directory

It's vital the credentials stored within are kept secure - so how can we apply zero trust principles towards keeping our Active Directory secure?

Password reset processes are often a point of vulnerability in an organization's Active Directory security, especially when they involve sending a reset link or code to the user's email or phone.

MFA is a key part of a zero trust strategy, as it adds additional layers of authentication beyond the password.

Having zero trust principles in place certainly helps, but it's not a silver bullet for password security.

Hackers have multiple methods for bypassing MFA. It's therefore key that organizations have a way to check for passwords that have become compromised - otherwise a hacker can relatively simply bypass the zero trust processes you have in place.

The Breached Password Protection service blocks these breached passwords in Active Directory and notifies end users to immediately change to a new and secure password.

News URL

https://www.bleepingcomputer.com/news/security/how-to-apply-zero-trust-to-your-active-directory/