Inside the Microsoft Breach - NHI Lessons Learned

Learn from a firsthand account of the 2022 Microsoft breach by Lapsus$ in this conference talk where Itzik Alvas, Co-founder and CEO of Entro Security, shares critical insights from his experience leading internal cloud security during the incident response. Discover how this major security breach exposed the hidden dangers of non-human identity (NHI) sprawl and revealed why secrets and service accounts represent a more significant threat than most organizations realize. Explore the evolution of security thinking that emerged from this incident, including how the breach catalyzed the development of an entirely new security category: NHI lifecycle management. Gain valuable lessons about the vulnerabilities in modern cloud infrastructure and understand the strategic importance of properly managing non-human identities in enterprise environments.