The 2026 Guide to NTLM Hash Security and Kerberos Migration

An NTLM hash is the mathematical version of a password that Windows uses for legacy authentication. For years, the security industry has known that older versions of this system were broken. Now, the 2025 and 2026 security baselines target the death of the entire NTLM stack, including NTLMv2. Microsoft is pushing companies to use Kerberos …

The 7ASecurity Strategy for Entra Roles: Beyond Global Admin

Managing Entra roles is no longer just assigning permissions; it’s about automating how we remove access. Microsoft Entra is shifting away from broad built-in roles like Global Admin toward highly specialised, restricted roles. As of 2026, the secure-by-default standard requires Zero Standing Access (ZSA). With ZSA, permissions are only granted temporarily and are controlled by …