<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>CloudDay</title><link>https://cloudday.co.uk/</link><description>Practical writing on Entra ID, Conditional Access, privileged access and identity governance.</description><language>en-gb</language><item><title>Phishing-resistant MFA: what actually counts</title><link>https://cloudday.co.uk/posts/phishing-resistant-mfa/</link><guid isPermaLink="true">https://cloudday.co.uk/posts/phishing-resistant-mfa/</guid><pubDate>Mon, 19 Oct 2026 00:00:00 +0000</pubDate><description>Not every second factor survives an adversary-in-the-middle. A short guide to which methods do, and how to enforce them in Entra.</description></item></channel></rss>