Pinned post
3 AD security checks you can do in 10 minutes that could be the difference between a threat actor compromising your internal environment or not… x.com/i/article/2108…
spencer
Verified account This account is verified. Learn more@techspence
🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV
3.1K Following 19K Followers 59K Posts
Latest posts 5
I’ve begun a deep dive into Microsoft 365 token theft and SSO application session theft.
I’m horrified and feel for defenders so much.
Microsoft relies on the saas vendor to do their part. And the saas vendor is relying on Microsoft to do their part.
And neither is doing a good enough job quite honestly.
I’m horrified and feel for defenders so much.
Microsoft relies on the saas vendor to do their part. And the saas vendor is relying on Microsoft to do their part.
And neither is doing a good enough job quite honestly.
So much incredible work going on behind the scenes of @wpninjasus by @m0bilej0n to make sure this event is not only informative but also professionally rewarding.
community.workplaceninjas.us/dojo
community.workplaceninjas.us/dojo
Big up on this. It’s why I encourage people interested in cybersecurity to first go into IT
Every offsec/redteamer NEEDS to spend time on the blue team in appsec + detection. Even if it’s just a short staff-aug gig.View quoted post on X
Need to stop hearing “there is no playbook, we are blindfolded”; it’s been discussed extensively, you’re just too busy popping xss?
Can’t wait to duke it out in January! This is a don’t miss it kind of an event! 🙌
@rucam365's prediction for after the AI apocalypse: only cockroaches and Active Directory survive.
He might be right. 🪳
70 seconds from our Workplace Ninjas US special. Full episode below.View quoted post on X
