Security on CloudTaleshttps://cloudtales.gr/tags/security/Recent content in Security on CloudTalesHugoen-USMon, 05 Oct 2026 00:00:00 +0000Zero-Key Architecture on Azure: I Disabled Every Keyhttps://cloudtales.gr/zero-key-architecture-azure/Mon, 05 Oct 2026 00:00:00 +0000https://cloudtales.gr/zero-key-architecture-azure/A zero-key architecture on Azure: Speech, Storage, Functions and Application Insights with every key disabled, Entra ID only.I Asked the Domain Controller for a Ticket. It Handed Me a Service Account Password.https://cloudtales.gr/kerberoasting-service-accounts-gmsa/Wed, 15 Jul 2026 00:00:00 +0000https://cloudtales.gr/kerberoasting-service-accounts-gmsa/A low-privileged user Kerberoasting a weak service account, cracked offline in seconds. Then a gMSA with AES-only encryption makes the same attack fail.I Watched One Stolen Hash Walk Into a Second Machine. Then LAPS Shut the Door.https://cloudtales.gr/pass-the-hash-lateral-movement-laps/Mon, 13 Jul 2026 00:00:00 +0000https://cloudtales.gr/pass-the-hash-lateral-movement-laps/I built a lab, ran a pass-the-hash attack across two machines, and watched Windows LAPS shut it down. The story, the failures, and the fix.Fail-Closed VPN Gateway on Linux: A Design Deep Divehttps://cloudtales.gr/fail-closed-vpn-gateway-linux/Tue, 07 Jul 2026 00:00:00 +0000https://cloudtales.gr/fail-closed-vpn-gateway-linux/How to build a fail-closed VPN gateway on Linux with policy routing, DNS enforcement, and transactional updates. Full design write-up.Azure Cache for Redis Retirement: The Real Cost of Migrating to Azure Managed Redishttps://cloudtales.gr/azure-cache-for-redis-retirement-managed-redis-migration/Sun, 07 Jun 2026 00:00:00 +0000https://cloudtales.gr/azure-cache-for-redis-retirement-managed-redis-migration/The Azure Cache for Redis retirement is set. Get the dates per tier, the traps lift-and-shift hides, and how to migrate to Azure Managed Redis.The Five Azure Landing Zone Decisions That Actually Matterhttps://cloudtales.gr/azure-landing-zone-decisions-that-matter/Fri, 15 May 2026 00:00:00 +0000https://cloudtales.gr/azure-landing-zone-decisions-that-matter/Five Azure landing zone decisions every senior architect makes — and the design areas you can safely defer until evidence demands them.Microsoft Entra Identity Management for Cloud Architecturehttps://cloudtales.gr/microsoft-entra-identity-management/Tue, 17 Mar 2026 00:00:00 +0000https://cloudtales.gr/microsoft-entra-identity-management/Microsoft Entra identity management forms the foundation of modern cloud security. In today’s cloud-first and hybrid environmentsWindows Server 2022 Editionshttps://cloudtales.gr/windows-server-2022-editions-a-comprehensive-guide/Sat, 03 Jun 2023 00:00:00 +0000https://cloudtales.gr/windows-server-2022-editions-a-comprehensive-guide/Discover Windows Server 2022 Editions, their features, and benefits to make informed decisions for your organization's server infrastructure.