Johan retweeted
Secure Boot 2026: Essential Updates and Fixes – The Deployment Bunny deploymentbunny.com/2026/04/…
Johan retweeted
Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw
Note: This is for Windows 11 Enterprise devices enrolled in hotpatches via Windows Autopatch.
bleepingcomputer.com/news/mi…
bleepingcomputer.com/news/mi…
Johan retweeted
Microsoft just dropped an emergency security hotpatch (KB5084597) for Windows 11 24H2 and 25H2. 🚨
It fixes a critical RCE flaw in the RRAS management tool that could let attackers execute code over a network.
Check Windows Update now. 💻
Details: neowin.net/news/kb5084597-mi…
Johan retweeted
🚨 Cisco is warning of active exploitation of a CVSS 10.0 flaw in Catalyst SD-WAN controllers.
CVE-2026-20127 lets unauthenticated attackers bypass auth and gain admin access. Exploitation tied to UAT-8616 dates back to 2023, including rogue peers in the control plane and root escalation.
🔗 Read → thehackernews.com/2026/02/ci…
Johan retweeted
🛑 URGENT: Microsoft rushed out out-of-band fixes for an actively exploited Office zero-day.
CVE-2026-21509 (CVSS 7.8) lets attackers bypass Office security using a malicious file that must be opened by the victim.
🔗 Details → thehackernews.com/2026/01/mi…
Johan retweeted
⚠️ Heads up!!! Big warning for HP AI Devices! ⚠️
Some of HP’s latest Next Gen AI PCs, including the EliteBook X Flip G1i, are getting the updated OneAgent 1.2.50.9581 build.
That version seems to run a cleanup script removing any certificate containing “1E” in its subject .... which can delete the MS-Organization-Access cert.
Once that happens, your device is no longer Entra joined or Intune Enrolled!.
#Intune #MSIntune #Windows #Windows11 #Entra
Johan retweeted
Heads up - if you are not currently enforcing attestation for passkeys in Entra, either reconsider or start allowlisting providers by AAGUID
If you don't do this by next month, your users will be able to use iCloud, Google, 1Password, Bitwarden, or whatever else they want ;)
This Post is from a suspended account. Learn more
Johan retweeted
A friend of mine (Jean-Francois Gobin) has created a series of blog posts that delve into how a Web Shell operates. Here is intriguing Halloween readings:
truesec.com/hub/blog/she-sel…
truesec.com/hub/blog/she-sel…
truesec.com/hub/blog/she-sel…
#Truesec @Truesec
Johan retweeted
The CVSS score for the CVE has been adjusted to a 10.0 it appears 👀
msrc.microsoft.com/update-gu…
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…
Johan retweeted
Also fun, CIS says to enable ASR rules (which you absolutely should), but then disabling cloud delivered protection effectively disables 3 of the ASR rules they say you need to enable :P
So in the end, you can't actually get a device configured per the CIS Benchmarks, lol
Johan retweeted
Quick Machine Recovery is now available in Windows 11 24H2 (KB5062660)
The CrowdStrike incident was a wake-up call.
Devices failed. Recovery didn’t scale. IT had no way to respond fast enough.
Now there is.
Quick Machine Recovery brings resilience to Windows 24h2.
When devices fail to boot, Windows can now recover automatically: no USB sticks, no Safe Mode, no hands-on recovery needed.
Just one policy, and it gets back to work.
Now shipping in the July 24H2 update.
patchmypc.com/blog/quick-mac…
#Intune #MSIntune #Windows #Windows11 #QuickMachineRecovery #Security
Johan retweeted
Microsoft to now provide updates to inbox apps within new Windows 24H2 and Windows Server 2025 media from herein. #SysAdmin #PatchTuesday #Windows11 #Windows #WindowsServer #ITAdmin
techcommunity.microsoft.com/… Inbox Microsoft Store apps update in Windows media - Windows IT Pro Blog
Johan retweeted
Backup and restore for Microsoft Authenticator will no longer require a personal Microsoft account! > ourcloudnetwork.com/microsof… 🎉
In September 2025, Microsoft will automatically backup users' Microsoft Authenticator credentials to 𝐢𝐂𝐥𝐨𝐮𝐝 & 𝐢𝐂𝐥𝐨𝐮𝐝 𝐊𝐞𝐲𝐜𝐡𝐚𝐢𝐧 and remove the iCloud & Microsoft personal account backup option!
The backup options will then be directly managed from the iPhone settings panel, hopefully addressing some enterprise concerns of mixing personal and corporate data!
#Entra #Authenticator #Microsoft
Johan retweeted
Awesomeness!!!
Do you remember the MMS Bunny? 🐰We're pleased to have Mikael Nystrom as SPEAKER at MMS Music City Edition! Congrats @mikael_nystrom, see ya in Nashville!
Don't forget - Register Today: mmsmoa.com/mms2025music
October 12-15, 2025
#MMSMusicCity #MSIntune #ConfigMgr #Windows #ITpros #MMSMOA
Johan retweeted
CVE-2025-21204: SYSTEM-Level Privilege Escalation in Windows Update Stack Exposed, PoC Released
About the c:\inetpub … securityonline.info/cve-2025…
Johan retweeted
Now in the official documentation.
Session ID was long missing from the Entra Signin Logs outside of XDR but since early February 25 we can use it.
It already has proven a powerful addition in detecting token theft
Threat hunters rejoice! This is HUUUGE news 👏
Microsoft just introduced linkable identifiers in Microsoft Entra ID logs.
The bad guys 🥷 are going to hate this so much 😂
Learn more at learn.microsoft.com/en-us/en…
Share the good news 👍
Johan retweeted
New breakout from Hyper-v guest to host.
Details here:
truesec.com/hub/blog/how-to-…
Johan retweeted
Important reading: Attacking PowerShell CLIXML Deserialization
truesec.com/hub/blog/attacki…
