A personal blog by an AWS Principal Security Solutions Architect that shares announcements and links to her talks, interviews and AWS blog posts. Readers get pointers to AWS security guidance, such as improving Security Hub scores, and to discussions about security culture.
Website: https://www.megan-oneil.com/
Practical, KQL-heavy lessons on Microsoft Sentinel and Entra ID security, covering detection rule tuning, log cost reduction and exposure from anonymous sharing links. Each issue critiques a common default or assumption and shows a concrete fix.
In-depth articles on Microsoft endpoint and identity security architecture, covering Conditional Access, Windows LAPS, and Intune, with design trade-offs and documented limitations. Includes field incident write-ups that trace a real production problem to its root cause and fix.
A researcher's newsletter on cloud and identity security, covering privilege escalation paths, service-account confused deputy problems and the effect of AI on vulnerability exploitation. Readers get technical write-ups of specific cloud flaws alongside opinionated commentary on the security industry.
Philip Walley writes about enterprise cybersecurity topics including SASE, Zero Trust, AI agents and authorization for leaders designing secure networks. The issues offer a clear point of view, such as treating AI agents like temporary contractors and enforcing limits architecturally rather than through prompts.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
