Jocke A

I did a thing!

Som dessutom ska tömmas var 6:e vecka (istället för varannan). Blir härlig jäsning i solen på sommaren.

msva.se/avfall/narso...

AppSec Cheat Sheet: Session Management

Session management is a critical component of application security. In our new blog, Senior Security Consultant Aaron James provides a quick reference cheat sheet and detailed guidance on cookie session testing to help you yield high rewards. Read it now!

trustedsec.com/blog/appsec-...

nginx 1.19.2 🫣

😆 MIM just started

How do you meaningfully improve the security of your AD environment?

Run these free tools quarterly:

- PingCastle
- ScriptSentry
- Locksmith
- ADeleginator

Securing our future: April 2025 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog The Microsoft Secure Future Initiative (SFI) stands as the largest cybersecurity engineering project in history and most extensive effort of its kind at Microsoft. Now, we are sharing the second SFI p...

Read about our progress on securing Microsoft in our Secure Future Initiative update:

I think they in general will resell it to the customer with some additional $ added to the bill.

I'm not 100% updated on W2025SB/OSConfig but it sure looks amazing.

What's applying the settings under the hood?

What happens if W2025SB conflict a GPO setting?

Will they fight each other for eternity like GPO vs DSC or is there some WARN about conflicts?

Free Windows Server 2025 Security Advice Book | Microsoft Community Hub Windows Server 2025 introduces a suite of new and enhanced security features tailored to tackle modern threats across on-premises, hybrid, and cloud...

PLEASE RP: free Windows Server 2025 Security Advice Book...

techcommunity.microsoft.com/blog/itopsta...

I think Cloud Identity summit is still open
@identitysummit.bsky.social

www.identitysummit.cloud

Yes, I was thinking about ATA 👍

Like the software that you port mirrored the traffic to/from DCs to find lateral movement etc. and had installed in your local datacenter without Azure involvement.

Cloud #IdentitySummit 2025 is back!
Save the date and join this community event with #IdentitySecurity, #MicrosoftEntra, and #CloudIdentity deep dive sessions in Dortmund, Germany.

Call for Papers is open now:
sessionize.com/cloud-identi...

Stay tuned for more details:
www.identitysummit.cloud

Det framgår ju inte riktigt om de bara klickat på en länk eller om de också gjort något mer. Men absolut bör man ha mer rigorösa mekanismer på plats som skyddar IT-miljön än bara de facto att en länk har besökts.

8-9 char password? 🤯

YouTube video by Disobey [D25] Exploiting Token Based Authentication - Dr Nestori Syynimaa

So pin/cert possible to steal during some circumstances. Otherwise PRTs are popular hunting stuff when hybrid/cloud mode is used (often the case with WHfB enabled)

Some sessions about it
youtu.be/mFJ-NUnFBac?...

youtu.be/b-9d5UXOcaA?...

100% secure?! 🤯 Against what?

Elcykel med extra batterier ger skjuts en bit i alla fall

But your findings with CertRefreshInterval/fMonitorCertificate + techcommunity.microsoft.com/blog/askds/r... indicate otherwise I guess, where Enroll is enough since the service handle it automatically anyway.

Thanks a lot, awesome findings.

It's a bit confusing that online material and even documentation like this learn.microsoft.com/en-us/previo... says that the template should have auto enroll enabled.

And then, since the template only needs enroll, the terminal service also must keep track of expiration date etc. I assume? So the service knows when to fire a new request against the configured GPO template name.

Remote Desktop Services enrolling for TLS certificate from an Enterprise CA | Microsoft Community Hub Hey! Rob Greene again.  Been on a roll with all things crypto as of late, and you are not going to be disappointed with this one...

The template should have only enroll techcommunity.microsoft.com/blog/askds/r...

@awakecoding.com do you know if there is any more info available regarding the magic that happens behind the scene when Remote Desktop Configuration service enroll new certs for remote desktop authentication?

Trying to understand a bit more about the "Remote Desktop Authentication" certs and the setting enroll vs auto enroll on the template.

Should the template have enroll or auto enroll configured?

No worries, just a last minute patch 😆

My @disobeyfi.bsky.social talk is finally out! Link to video and slides available at aadinternals.com/talks

And yes, @notmynick.bsky.social used some weird filter, I'm not that fat nor old 😜

🎙️ BIG NEWS: I'm launching Entra.Chat - the podcast identity pros have been waiting for!

After years in the identity trenches, I've seen a lot - the midnight calls, the authentication puzzles, and those "how is this even possible?" moments.

"Hon har varnat för att verktyget kräver en stor investering för skolorna när det gäller nätkapacitet, federerad inloggning [...] och multifaktorautenticering"

Inkluderar man detta i kostnaden för alla skolor så misstänker jag siffrorna är betydligt högre.

security.txt existerar väldigt sällan, tyvärr. Även om det bara är en liten del i det hela.

Yes, how TLS is used in RDP.

I was thinking about the padlock in mstsc that you get when remote host has a certificate enrolled with the correct EKU saying something like the connection was secured with Kerberos and server certificate. And how Kerberos and TLS play together in that part.