Anthony Coggins

Alert: SharePoint CVE-2025-53770 incidents! In collaboration with Eye Security & watchTowr we are notifying compromised parties. See: research.eye.security/sharepoint-u...

~9300 Sharepoint IPs seen exposed daily (population, no vulnerability assessment): dashboard.shadowserver.org/statistics/i...

It’s that time again, apparently.

🚨🚨The White House is pissed off about this ad so you know what to do, share it everywhere! ICE is disappearing people just because of the color of their skin! No Warrant! No Due Process! This is not who we are as Americans! #MAGAKidnappers want an all white America, fuck that‼️

A different taken on the CISO / Cybersecurity Leader Job Description.

www.philvenables.com/post/ciso---...

if u see this
post your getaway vehicle

For the last few days we are also scanning & reporting out exposed Ingress NGINX Controller for Kubernetes (Admission Controller feature). These may possibly be also vulnerable to CVE-2025-1974 & other recently disclosed vulnerabilities.

We see around 4000 IPs exposed.

Donald Trump has vowed to deport millions and jail his enemies. To carry out that agenda, his administration will exploit America’s digital surveillance machine. Here are some steps you can take to evade it.

@lhn.bsky.social has a guide for you:
www.wired.com/story/the-wi...

App Management Policies are now in the Entra ID FREE Tier!! So what are app management policies? How can they be used to secure your tenant?

This doesn't happen everyday folks!!

Entra ID application management policies no longer require a Workload ID Premium license! 👏🎁🍾🥳🎊

This change happened back in October last year and I somehow missed it.

Here's a complete walkthrough 🧵👇

✳️ Bookmark this.

Add me to the list!

We're cooked

What does Crowdstrike do when their government contacts are threatened if they make an attrib this government doesn't like?

This is a fun one :)

Let's say you have a Conditional Access policy requiring MFA for All resources, and then you exclude one resource

Did you know that also automatically adds additional exlusions for some low privileged scopes depending on client app?

learn.microsoft.com/...

Y'all know this is how Horizon Zero Dawn started right?

I'm getting tired of vendors trying to build security products that do everything. Seriously, pick something and do that. The rest is a distraction for you and friction for me.

Meta is leaving its users to wade through hate and disinformation Meta’s decision to eliminate fact-checking could unleash a flood of disinformation, experts warn.

Meta is leaving its users to wade through hate and disinformation

CrowdStrike Services Releases Free Incident Response Tracker This blog post provides an overview of the newly released CrowdStrike Incident Response Tracker and how it is leveraged by our experts on the front lines.

How do you track DFIR timelines and findings? There doesn't seem to be a one size fits all solution in the industry.

Most commonly used are still spreadsheets, where Crowdstrike actually released a pretty nice IR Tracker template a while ago: www.crowdstrike.com/en-us/blog/c...

I hate how much I love this

You also can't open up an EML or ICS file with it still....

Ascension: Health data of 5.6 million stolen in ransomware attack ​Ascension, one of the largest private U.S. healthcare systems, is notifying over 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation.

​Ascension, one of the largest private U.S. healthcare systems, is notifying over 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation.

Cybersecurity... Amirite?

Clop ransomware claims responsibility for Cleo data theft attacks The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data.

As many people suspected, CL0P is taking credit for the CLEO 0-Day attack. That’s not…good.

Via @lawrenceabrams.bsky.social & @bleepingcomputer.com

Defeating Adversary-in-the-Middle phishing attacks | Microsoft Community Hub Welcome to the second in our series of articles on dealing with advanced identity-related attacks.  As we’ve crossed the threshold of more than 40% of...

Second in series on advanced identity attacks and mitigations - Adversary in the middle phishing: techcommunity.microsoft.com/blog/identit...

How to make pentesters cry...

Run PingCastle/PurpleKnight, Locksmith, and ScriptSentry in your environment and fix all the critical issues before your next pentest.

I promise you...they will be weep

Fresh powder fun!

All the cool kids have their own domain