HDM

Cybersecurity

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft Defender research details a multi-stage intrusion that began with a compromised internet-facing firewall appliance and pivoted to an internal Linux host, where a vulnerable SaaS application was exploited to run authentication attacks. https://t.co/C4NfRj0QBT

This activity reflects a broader pattern where internet-facing edge devices are used as entry points to access internal systems and identities. Because they’re often exposed, lightly monitored, and implicitly trusted, compromising these devices provides threat actors a durable, low-visibility foothold.

The incident highlights how threat actors move from infrastructure compromise to identity abuse across environments. Defenders should prioritize visibility across edge devices, internal applications, and identity systems to better assess and disrupt attack paths early.

[Anatoli Kopadze @AnatoliKopadze]

A Google Cloud engineer just showed how to build a full app with Claude from scratch

he spent 26 minutes showing exactly what one person with Claude can do, completely free

worth more than any $500 vibe-coding course

here's what he covers:
> raw idea to deployed app in a single session
> using Claude as the entire engineering team
> the exact workflow they use at Google
> no big team, no prior experience needed

the people who figure out what Claude can actually do are building things everyone else thinks requires a team

that's exactly why I put together a guide on Claude features most people have no idea exist

the guide is in the article below

[Md Ismail Šojal 🕷️ @0x0SojalSec]

List of Almost all OSINT tools for penetration testing and information gathering✨

- https://t.co/A2lcWxob0p

#infosec #cybersec #bugbountytip

[Panos Gkatziroulis 🦄 @ipurple]

NeuroSploitv2 - an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large language models (LLMs) https://t.co/O0onfHicQH

[Abdulkadir | Cybersecurity @cyber_razz]

OSINT TOOLS

[Project Sekai CTF @ProjectSEKAIctf]

🎁 Monthly Giveaway 🎁

Hack The Box 12-month VIP+ x1
- Follow, Like, and Retweet to join!
- Winner will be picked randomly on 3 September.

#hackthebox #giveaway #projectsekaictf

[13Cubed @13CubedDFIR]

If you've been considering Investigating Windows Endpoints, someone published a new blog post comparing the course to FOR500. It's filled with great information! Check it out here: https://t.co/eI11qvPccl #DFIR

[Massimo @Rainmaker1973]

Have you ever wondered why movie theater popcorn tastes way better than yours?

[📹 theshoppingexpert]

[Nick Aleks @Nick_Aleks]

I’m giving away 10 FREE signed copies of our new book, Black Hat Bash! 🎉 Want one? Repost for a chance to win. #BlackHatBash #free #Giveaway

[Han OC @HanOCSecurity]

Need @nostarch to stop publishing great books for a while so I can afford to eat again…

[Eric Partaker @Eric_Partaker]

The only leadership cheat sheet you will ever need:

It’s like a whole leadership book condensed into a single page.

Based on 20+ years of experience as a leader, 100s of leadership books & resources, and 1,000s of hours coaching aspiring leaders.

[7h3h4ckv157 @7h3h4ckv157]

100 Days of Hacking!

Day 36 #Special ⬇

~# Cloud Hacking 🔥 📢

- Introduction to Cloud Pentesting
https://t.co/mC8lN03P31

- Hackingthe[.]cloud
https://t.co/z9kz4hAoHO

- Awesome-Cloud-PenTest
https://t.co/pFw0rRqyaj

- Cloud CTF
https://t.co/c4mCRmA8SD

- Cloud Pen-Testing Methodology
https://t.co/uvWmxjkhdO

#cybersecurity #Pentesting #Hacking #bugbountytips #infosec #pwn #CTF #cybersecuritytips #redteam #coding #100DaysOfHacking #vulnerabilities #BugBounty #Hardware #Software #computer #learning #checklist #CyberSecurityAwareness #100DaysOfCyberSecurity #Cloud #CloudComputing #CloudHacking #AWS #Azure #GoogleCloud

[Matt Zorich @reprise_99]

This is a query that I always find useful; using Defender for Cloud Apps, find when an inbox rule is created that uses only special characters for its name, such as '..' or '...'. This continues to be common behaviour for email-based attacks like BEC - https://t.co/u9vFLEgZPJ

[Invictus Incident Response @InvictusIR]

Five reasons why you should read our new blog on email forwarding rules in Microsoft 365 🔍🧵

https://t.co/CuYNOVwWCN

1. You'll learn the difference between the New-InboxRule and UpdateInboxRules Operation
2. Learn how to find forwarding rules without Exchange logging 🤯

[Matt Zorich @reprise_99]

Useful diagram and explanation of the order of operations for mail flow in Exchange Online Protection / Defender for Office 365 found in my MS Learn travels, including this neat visual - https://t.co/4vpeaPIxXH

[Matt Zorich @reprise_99]

Ever see sign-ins to apps in your Azure AD tenant and you are unsure if they are Microsoft apps? There is a good guide here to verify if they belong to Microsoft. It also includes a table of commonly seen first party apps - https://t.co/vEPNnbOs5a

[Dan Go @CoachDanGo]

How to get in better shape than 95% of the population (in 4 months):

[rootsecdev @rootsecdev]

The Attackers Guide to Azure AD Conditional Access – Daniel Chronlund Cloud Tech Blog https://t.co/BqNKCwukZ4

[Matt Zorich @reprise_99]

If you haven't read the Threat Hunting Survival Guide, it is probably worth your time. While it's focused on Defender, but there are a lot of great takeaways in there with regards to hunting methodology and mindset regardless of technology - https://t.co/1NPIAKyOob

[Frank Lesniak @FrankLesniak]

What are your favorite #PowerShell modules/scripts for exporting (and maybe importing) #AzureAD Conditional Access policies?