<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Blog | Lucas Hollweck</title><description>Notes on IT security, Zero Trust, edge computing and practical technology by Lucas Hollweck.</description><link>https://lucas-hollweck.de/</link><language>en</language><item><title>Device Code, the second login in Entra ID</title><link>https://lucas-hollweck.de/en/blog/device-code-is-a-second-login/</link><guid isPermaLink="true">https://lucas-hollweck.de/en/blog/device-code-is-a-second-login/</guid><description>A short code, the real Microsoft sign-in page, confirmed MFA. In the end the mailbox sits with the attacker.</description><pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate><category>IT security</category><category>Identity</category><category>Entra ID</category></item><item><title>Security starts at the device</title><link>https://lucas-hollweck.de/en/blog/device-security/</link><guid isPermaLink="true">https://lucas-hollweck.de/en/blog/device-security/</guid><description>Why endpoint and device security is the foundation of Zero Trust in the cloud-edge continuum – TPM, attestation, and measurable integrity.</description><pubDate>Tue, 11 Aug 2026 00:00:00 GMT</pubDate><category>IT security</category><category>Zero Trust</category><category>IPCEI-CIS</category></item></channel></rss>