Collaborate Disseminate
Microsoft calls it “Modern Auth”, though it’s a decade old, and is finally forcing Exchange Online customers to switch to it. Continue reading Serious Security: OAuth 2 and why Microsoft is finally forcing you into it
We’ve entered the final quarter of 2022 with a favorite holiday for many – Halloween, at the end of the month. Unfortunately, Microsoft has continued to play a few tricks on us. Several Microsoft Exchange Server vulnerabilities have been reported and e… Continue reading October 2022 Patch Tuesday forecast: Looking for treats, not more tricks
Latest episode – listen and learn now (or read and revise, if the written word is your thing)… Continue reading S3 Ep103: Scammers in the Slammer (and other stories) [Audio + Text]
Who’s affected, what you can do while waiting for Microsoft’s patches, and how to plan your threat hunting… Continue reading S3 Ep102.5: “ProxyNotShell” Exchange bugs – an expert speaks [Audio + Text]
According to researchers at GTSC, there’s an unpatched 0-day being used in-the-wild to exploit fully patched Microsoft Exchange servers. When they found one compromised server, they made the report to …read more Continue reading This Week in Security: Exchange 0-day, Doppelgangers, And Python Gets Bit in the TAR
Double-play 0-day in Exchange – what you need to know, and what you can do Continue reading URGENT! Microsoft Exchange double zero-day – “like ProxyShell, only different”
September is here, and for most of us in the northern hemisphere, cooler temperatures are on the way. Unfortunately, the need to maintain and update our computer systems remains hot. August 2022 Patch Tuesday provided critical updates for all Microsoft… Continue reading September 2022 Patch Tuesday forecast: No sign of cooling off
We always like to call out a commercial success stemming from projects that got their start on Hackaday.io, and so we’re proud to announce the release of MAKE: Calculus by …read more Continue reading Hackaday Links: July 10, 2022
May 2022 Patch Tuesday provided the final releases for several Windows 10 operating systems and this month we’ll see the final update for Internet Explorer 11. But don’t go on that family vacation thinking there will be less work to do when you come ba… Continue reading June 2022 Patch Tuesday forecast: Internet Explorer fades into the sunset
I wanted to learn that, for example, we have different types of servers in Azure Cloud. Examples include Exchange Server, Domain Controller and other production servers. As we know, we could assess the security of these servers using Power… Continue reading Can we do a security assessment in our servers using the Microsoft Graph API or the RESTful API?