Notes From The Field: Real Entra ID Attack Campaigns

Join Threatscape's Ru Campbell and SecurityHQ's Paul Allen to understand how real Entra ID attacks were detected, and how to prevent them.

Ru Campbell, Microsoft MVP and Threatscape’s Microsoft Security Practice Lead, will work through:

• Real-world examples of the techniques employed by threat actors to gain access to secure Entra environments as evidenced by threat intel data, along with how to shore up defences.
• The keys to Entra ID defence, with an understanding of how approaches such as device compliance and phish-resistant authentication feed into a larger strategy of Conditional Access for identity security.
• A meaningful roadmap of corporate cyber security hygiene practices to guard against the majority of identity-focused cyber attacks.

And to provide deeper context on the real-world impact of these attacks, Paul Allen, Leader of Technical Presales at SecurityHQ and a subject matter expert on Managed Extended Detection and Response and cloud security strategy, will utilise threat intelligence data gathered from real cyber attacks against Entra ID to give attendees:

• An overview of the UK & Ireland threat landscape for 2025, built from real incident data and threat intelligence, highlighting the most targeted industries, active threat actors, and emerging attack trends across the region.
• The geopolitical factors influencing cyber threats today, and how global tensions are driving increased targeting of organisations across critical sectors.
• A deep dive into real-world Entra ID breach case studies, analysing how these incidents unfolded and the resulting business impact.

The session will conclude with an open Q&A, offering you the chance to put your Entra ID questions to a Microsoft MVP and security specialist.