Vulnerabilities & where to find them

The intent is there. The gaps are, too.   That is how we describe what we see time and again in our projects: environments are improving. MFA rolled out, passkeys being introduced, Conditional Access, LAPS, AppLocker, a managed EDR.   And yet we still find...