Blog

Articles on today’s and tomorrow’s IT

Stay updated on the latest trends and technologies in IT. We explore today’s solutions and tomorrow’s potential – from security and cloud to digital transformation and AI. Read our articles and get inspired to develop your IT opportunities both today and in the future.

The growing importance of physical security in the age of cyber threats

Decrypting Jett Ransomware: When hackers make coding mistakes

Who hacked us – A forensic story of attribution

Response Parameter Injection - slightly hidden gems

Read2Own: Red Teaming Microsoft Azure

Read2Own: Red Teaming Microsoft Azure

Network share risks – deploying secure defaults and searching shares for sensitive information

Network share risks

Setup RDP to DC from jumphost/PAW only - with IPSec

Preventing lateral movement in Active Directory with Authentication Policies

Local privilege escalation vulnerabilities in PeaZip MSI installer

Local privilege escalation vulnerabilities in PeaZip MSI installer

The Dangerous Relative Perspective of Cyber Security

Mobile Applications and Security Considerations

Most commonly found vulnerabilities

Privilege escalation vulnerability in Anaconda3 and Miniconda3

Privilege escalation vulnerability in Anaconda3 and Miniconda3

Brief: The restriction is often seen in environments such as kiosks PCs and prevents an interactive command prompt with the goal of reducing the possibilities of an attacker. This post explains how the restriction may be bypassed to obtain (interactive) command execution via Command Prompt to increase the possibilities in a penetration test. Mitigations against these bypasses can be found at the end of the post.

The command prompt has been disabled by your administrator. Press any key to continue... or use these weird tricks to bypass – admins will hate you!

Privileged Access Workstation

Privilege escalation vulnerability in NinjaRMM Agent MSI Installer introduced by EXEMSI MSI Wrapper

Privilege escalation vulnerability in NinjaRMM Agent MSI Installer introduced by EXEMSI MSI Wrapper

Mimikatz Under The Hood

Mimikatz Under The Hood

Say Goodbye to Bad Passwords: How Azure Active Directory Password Protection can save the day

Check and harden your Linux kernel security parameters with sysctl …and automatize it!

Check and harden your Linux kernel security parameters with sysctl …and automatize it!

Multiple vulnerabilities in cifs-utils

Multiple vulnerabilities in cifs-utils

New Zero-Day Exploit Targets Microsoft Exchange Servers

New Zero-Day Exploit Targets Microsoft Exchange Servers

How I killed BT's payphone email service

How I killed BT's payphone email service

Azure AD PIM as a Security Boundary

Azure AD PIM as a Security Boundary

TIBER and Red Team Testing Methodology

TIBER and Red Team Testing Methodology

Phish'n'Chimps: mail spoofing via marketing and CRM platforms

Phish'n'Chimps: mail spoofing via marketing and CRM platforms

The risks of guest and collaboration settings in Azure

The risks of guest and collaboration settings in Azure

The many pitfalls of Windows MSI - Privilege escalation in Windows 7/8.1/10/Server and a range of third-party products

All Your SPF Includes Are Belong To Us

All Your SPF Includes Are Belong To Us

Deploying mail security in Microsoft Office 365

Deploying mail security in Microsoft Office 365

SID filter as security boundary between domains? (Part 7) - Trust account attack - from trusting to trusted

SID filter as security boundary between domains? (Part 6) - Schema change trust attack - from child to parent

SID filter as security boundary between domains? (Part 6) - Schema change trust attack - from child to parent

SID filter as security boundary between domains? (Part 5) - Golden GMSA trust attack - from child to parent

SID filter as security boundary between domains? (Part 5) - Golden GMSA trust attack - from child to parent

SID filter as security boundary between domains? (Part 4) - Bypass SID filtering research

SID filter as security boundary between domains? (Part 3) - SID filtering explained

SID filter as security boundary between domains? (Part 3) - SID filtering explained

SID filter as security boundary between domains? (Part 2) – Known AD attacks - from child to parent

SID filter as security boundary between domains? (Part 1) - Kerberos authentication explained

SID filter as security boundary between domains? (Part 1) - Kerberos authentication explained

Basic Microsoft Active Directory Security - Identify and Prioritize Low-hanging Risks

Basic Microsoft Active Directory Security - Identify and Prioritize Low-hanging Risks

Storing Sensitive Data in Active Directory

Storing Sensitive Data in Active Directory

User-mode API hooks and bypasses

User-mode API hooks and bypasses

cyber security hacking

Is Buying the New Hacking? Rethinking Cyber Security

Jump Host Best Practices

Jump Host Best Practices

Fundamentals of AD Tiering

The Fundamentals of AD tiering