A T

But one thing I do: Forgetting what is behind and straining toward what is ahead

[A T @AR_T17]

@soccertorey Sergio Busquets 💭

[A T @AR_T17]

@utdmax0 lewandowski

[Bukayo Saka @BukayoSaka87]

You deserve more Arsenal fans 💔

[Rob Freund @RobertFreundLaw]

ChatGPT allegedly shares your chat query topics, user IDs, and email addresses with Google and Meta, according to a new class action lawsuit filed today.

[A T @AR_T17]

@JSKSA20 .

[A T @AR_T17]

@SIMBAROAR1 @Betway_za We don’t sleep 😅

[A T @AR_T17]

@farananiac1 Aah sold out 😒 at sweatshop

[spencer @techspence]

@PyroTek3 💪🙌

[Scott Schnoll @schnoll]

PSA: Do NOT use Windows Server 2025 as the schema master before installing Exchange Server SE RTM. The Windows Server team is working on a permanent fix for this issue (to be released in the following months).

#WindowsServer2025 #MSExchangeSE #ADSchema

https://t.co/rBmvqSIKst

[ALI TAJRAN @alitajran]

On September 30, 2025, Microsoft will deprecate the legacy multifactor authentication (MFA) and self-service password reset (SSPR) policies in Microsoft 365.

To avoid any service impact, you must migrate these old MFA and SSPR policies to the new converged (unified) Authentication methods policies by September 30, 2025.

Read more:
https://t.co/VtB2Ir6kFm

You have one month left. Time is ticking.

#Microsoft365 #EntraID #Cybersecurity #IAM #MFA #SSPR

[Merill Fernando @merill]

Microsoft just dropped a banger spreadsheet to help you level up your security! 🚀

It's a FREE Zero Trust assessment tool with a clear roadmap covering SIX key pillars.

Let's break it down! 👇

👥 Identity
📱 Devices
📊 Data
🌐 Network
🏗️ Infrastructure
🕵️‍♀️ Security Operations

[Horizon Secured @horizon_secured]

🔒 Secure Bits 💡
"𝗧𝗿𝘂𝘀𝘁 𝗥𝗲𝗹𝗮𝘁𝗶𝗼𝗻𝘀𝗵𝗶𝗽 𝗯𝗲𝘁𝘄𝗲𝗲𝗻 𝘁𝗵𝗶𝘀 𝘄𝗼𝗿𝗸𝘀𝘁𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗽𝗿𝗶𝗺𝗮𝗿𝘆 𝗱𝗼𝗺𝗮𝗶𝗻 𝗳𝗮𝗶𝗹𝗲𝗱"

Do you really understand what this message means? Let’s break it down. 👇

When a domain computer boots, it tries to establish a Secure Channel with a domain controller. This channel is protected by a Session Key — calculated using the Computer Account Password.

✅ If both sides (computer and DC) calculate the same session key → you're good.
❌ If not → you see:
"𝘛𝘳𝘶𝘴𝘵 𝘙𝘦𝘭𝘢𝘵𝘪𝘰𝘯𝘴𝘩𝘪𝘱 𝘣𝘦𝘵𝘸𝘦𝘦𝘯 𝘵𝘩𝘪𝘴 𝘸𝘰𝘳𝘬𝘴𝘵𝘢𝘵𝘪𝘰𝘯 𝘢𝘯𝘥 𝘵𝘩𝘦 𝘱𝘳𝘪𝘮𝘢𝘳𝘺 𝘥𝘰𝘮𝘢𝘪𝘯 𝘧𝘢𝘪𝘭𝘦𝘥."

𝗪𝗵𝘆 𝗱𝗼𝗲𝘀 𝘁𝗵𝗶𝘀 𝗵𝗮𝗽𝗽𝗲𝗻?
Most commonly when the computer tries to authenticate with an outdated password — for example, after restoring a VM snapshot older than 30 days.

𝗙𝘂𝗻 𝗳𝗮𝗰𝘁:
Windows stores two versions of the computer password in the registry:
▪️Current password (CurrVal)
▪️Previous password (OldVal)

🔎 But... this doesn't help when both passwords are already outdated across domain controllers.
(OldVal mainly exists to handle replication delays, not secure channel issues.)

𝗛𝗼𝘄 𝘁𝗼 𝗳𝗶𝘅 𝗶𝘁 𝗽𝗿𝗼𝗽𝗲𝗿𝗹𝘆?
You don't need to rejoin the domain!
Instead, use the PowerShell cmdlet:
𝘛𝘦𝘴𝘵-𝘊𝘰𝘮𝘱𝘶𝘵𝘦𝘳𝘚𝘦𝘤𝘶𝘳𝘦𝘊𝘩𝘢𝘯𝘯𝘦𝘭 -𝘙𝘦𝘱𝘢𝘪𝘳 -𝘊𝘳𝘦𝘥𝘦𝘯𝘵𝘪𝘢𝘭 (𝘎𝘦𝘵-𝘊𝘳𝘦𝘥𝘦𝘯𝘵𝘪𝘢𝘭)

⚡ This will reset the secure channel.
⚠️ Heads-up: You need an account with enough privileges over that computer account — not always ideal, as it s usually domain admin...

𝗤𝘂𝗶𝗰𝗸 𝗿𝗲𝗰𝗮𝗽:
▪️Secure Channel = communication protected by Session Key based on ▪️Computer Account Password.
▪️CurrVal & OldVal = help with replication, not broken trust.
▪️Rejoin is not necessary — fix it with Test-ComputerSecureChannel when possible.

How do you usually fix this issue in your environment?👇

#Windows #ActiveDirectory #SecureBits @BlueTeamDave

[Nathan McNulty @NathanMcNulty]

It's here! Modern auth for Entra Connect Sync is now available 🚀

This finally moves from user/pass to auth with Entra to using a Service Principle with a certificate. Another benefit is misconfigs in CA policies will no longer break syncing :)

Docs:
https://t.co/kytbW8u7JD

[SuperSport 🏆 @SuperSportTV]

Suleiman Hartzenberg bags a brace on his 50th appearance for the DHL Stormers 👏👏

#STOvCAR | #VURC

[Orin Thomas @orinthomas]

Active Directory Hardening Series - Part 1 – Disabling NTLMv1 https://t.co/EY2qzkBKoa

[DirectoryRanger @DirectoryRanger]

Entra ID App Escalations: Attacks & Defenses
https://t.co/mSFmk7HJ31

[Binni Shah @binitamshah]

Active Directory Hardening Series - Part 1 – Disabling NTLMv1 : https://t.co/E6Tlm28z60

Part 2 – Removing SMBv1 :
https://t.co/Y9d0ivLhhy

Part 3 – Enforcing LDAP Signing : https://t.co/xxQHVXWa1Z

Part 4 – Enforcing AES for Kerberos : https://t.co/FwycF5gxnD

Part 5 – Enforcing LDAP Channel Binding : https://t.co/ivrFgK1P3X

Part 6 – Enforcing SMB Signing : https://t.co/o4zH4NcCJl

Part 7 – Implementing Least Privilege : https://t.co/HDWNRfpsnI

[John Savill @NTFAQGuy]

Part 2 of the Azure Master Class v3, Identity, is up!

https://t.co/XZiJoXzaM9

00:00 - Introduction
01:55 - The need for identity
10:59 - Decentralized identity
18:52 - Enter Entra ID
30:00 - How do you get Entra ID?
38:01 - Entra ID Objects
57:46 - AD to Entra ID Sync
1:04:02 - Authentication & Authorization
1:05:14 - Authentication Options
1:13:41 - Roles and Administrative Units
1:27:31 - Privileged Identity Management
1:35:00 - Entra Permissions Management
1:36:27 - Access Reviews
1:39:13 - MFA and Strong Authentication
1:51:27 - Entra MFA Features
1:53:02 - Securing registration and SSPR
1:58:09 - Conditional Access
2:05:53 - B2B and External ID
2:17:52 - Entitlement management and workflows
2:19:59 - Internet and Private Access
2:24:19 - AD in Azure
2:28:00 - Close

#azure #cloud #microsoft #cloudcomputing #microsoftazure #azurecloud #youtubevideo #learning #azureadministrator #azurearchitect #microsoftcloud #entra #azuread #entraid

[Tech Fusionist @techyoutbe]

AWS Certifications 🔥🔥

You can plan for 2025 👇👇

Full PDF ⬇️

[Daniel Bradley @DanielatOCN]

Another huge security improvement⚡Microsoft now allows you to federate your app registrations with a Managed Identity, perfect for securely accessing resources in other tenants with multi-tenant apps! > https://t.co/exiwDFfhpd

This change means that you no longer need to store and manage 'stealable' client secrets or certificates to facilitate your connection to multi-tenant applications, especially when using Azure resources such as Azure Automation to run scripts against external tenants!

Currently in private preview, Microsoft hahase released code examples for various Identity libraries, but no support yet for mainstream tools such as the Microsoft Graph PowerShell SDK or Entra PowerShell modules.

#Entra