Written by Rafael Silva31/08/2021

Azure & Desired State Configuration Part 3/4

Azure & Desired State Configuration Part 3/4 https://ift.tt/3yDBcSZ Index Part 1 : Focus on Desired State Configuration in PowerShell Part 2 : Focus on Deploying with DevOps Pipeline Part 3 : Focus on Azure Automation Account Scenario In Part 1 and Part 2 we saw how we could deploy a web server on a new VM […]

Written by Rafael Silva31/08/2021

Karkinos – Beginner Friendly Penetration Testing Tool

Karkinos – Beginner Friendly Penetration Testing Tool https://ift.tt/3gNAfBo Karkinos is a light-weight Beginner Friendly Penetration Testing Tool, which is basically a ‘Swiss Army Knife’ for pen-testing and/or hacking CTF’s. Karkinos Beginner Friendly Penetration Testing Tool Features Encoding/Decoding characters Encrypting/Decrypting text or files Reverse shell handling Cracking and generating hashes How to Install Karkinos Beginner Friendly […]

Written by Rafael Silva30/08/2021

Hold the Door: Why Organizations Need to Prioritize Patching SSL VPNs

Hold the Door: Why Organizations Need to Prioritize Patching SSL VPNs https://ift.tt/3zgUkHf Three critical SSL VPN vulnerabilities have become some of the most exploited by advanced persistent threat actors and ransomware groups. To effectively prioritize remediation efforts, defenders must understand how attackers are targeting organizations and then act on that knowledge. Vulnerabilities in SSL VPN […]

Written by Rafael Silva30/08/2021

Why can’t you remove the last Exchange Server?

Why can’t you remove the last Exchange Server? https://ift.tt/3gKwqwI So, you’ve completed your migration to Exchange Online. Email flows smoothly into and out of the cloud, and all your mailboxes are now online. What’s next for your Exchange Servers, now that you’ve made the transition? After completion you will have several tasks to perform to […]

Written by Rafael Silva30/08/2021

OneDrive Syncing only for domain-joined causing issue for AAD Machines

OneDrive Syncing only for domain-joined causing issue for AAD Machines https://ift.tt/2UYOhIv Allow Syncing only on computers joined to specific domains option is a starting point to block personal devices from syncing with the domain when the user doesn’t have a intune license. Once a user gains a license for conditional access policies they can start […]

Written by Rafael Silva30/08/2021

Migrate Azure AD Connect to a New Server

Migrate Azure AD Connect to a New Server https://ift.tt/3kABQvf New Azure Active directory connect versions don’t support Windows server 2012 R2 anymore. Let’s see how to safely move the Azure AD Connect to a new operating system. There might be various scenarios on why you need to move to a new operating system. We will […]

Written by Rafael Silva30/08/202130/08/2021

ProxyToken: An Authentication Bypass in Microsoft Exchange Server

ProxyToken: An Authentication Bypass in Microsoft Exchange Server https://ift.tt/3zGkQtK Continuing with the theme of serious vulnerabilities that have recently come to light in Microsoft Exchange Server, in this article we present a new vulnerability we call ProxyToken. It was reported to the Zero Day Initiative in March 2021 by researcher Le Xuan Tuyen of VNPT […]

Written by Rafael Silva30/08/2021

Microsoft Azure Cosmos DB Guidance

Microsoft Azure Cosmos DB Guidance https://ift.tt/3kxDVYN Original release date: August 27, 2021 CISA is aware of a misconfiguration vulnerability in Microsoft’s Azure Cosmos DB that may have exposed customer data. Although the misconfiguration appears to have been fixed within the Azure cloud, CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate […]

Written by Rafael Silva29/08/2021