Tony Van Der Haagen

IAM, PAM, Least Privileges and Zero trust model is what you want.

[Tony Van Der Haagen @THaagen]

https://t.co/fcUo43ihB5

[Tony Van Der Haagen @THaagen]

@Markus_Allard Behöver ni fler påskrifter?

[Tony Van Der Haagen @THaagen]

@finanskristen PE: 604..

[Tony Van Der Haagen @THaagen]

@Engbl0m Parametrarna måste vända

[Tony Van Der Haagen @THaagen]

@Engbl0m Foodora for the win?

[ALI TAJRAN @alitajran]

Broadcom Begins Auditing Organizations Using VMware!

Earlier this year, Broadcom began sending cease-and-desist letters to organizations using VMware products. These letters instructed recipients to stop using any VMware updates or enhancements, such as maintenance releases, minor and major upgrades, patches, bug fixes, or security updates, issued after their support contract expired. The only exception is critical zero-day security patches.

The letters also warned of potential audits, which now appear to be in progress. Below is an example of a letter sent to a customer in the Netherlands.

According to the letter, the audit will be conducted by Connor Consulting, a global firm headquartered in San Francisco. The review will assess the organization's VMware deployment and entitlements. It may involve on-site visits, remote testing, and meetings with staff from accounting, licensing, and IT departments. Recipients are expected to respond to Connor Consulting within three business days.

The letter is signed by Aiden Fitzgerald, Director of Global Sales Operations at Broadcom, who states the audit process will be handled "as efficiently and productively as possible to minimize disruption to your daily business operations."

If your organization uses VMware, ensure you're compliant with the licensing terms. Otherwise, you risk paying a hefty penalty!

#Broadcom #VMware #Audit #Compliance #SoftwareLicensing

[Sarah Young @_sarahyo]

Okay so this is HUGE - our amazing AI red team have open sourced their AI red team labs so you can set up your own training!

https://t.co/brvdq6roHp

@ram_ssk

[DirectoryRanger @DirectoryRanger]

Active Directory Hardening Series
Part 1 Disabling NTLMv1 https://t.co/9gla1vtQ18
Part 2 Removing SMBv1 https://t.co/KOqpamarcW
Part 3 Enforcing LDAP Signing https://t.co/oW2Ymvu1ZW
Part 4 Enforcing AES for Kerberos https://t.co/iENjEPBOFD

[ALI TAJRAN @alitajran]

STOP users from joining computers to the domain!

By default, standard users can join a computer to the domain. Once they do that, they will automatically become the owner of the computer.

This gives them the ability to take control of the computer and make themselves a local administrator in just a few simple steps.

That's a security risk you don't want.

Also, many admins use their domain administrator account to join a computer to the domain. While this is the easiest to do because it has all the permissions, it's not advisable.

The recommendation is to create a new service account with limited permissions and use it to join a computer to a domain.

Learn more:
https://t.co/tb03NaSArq

#Microsoft #ActiveDirectory #Cybersecurity

[Florian Hansemann @CyberWarship]

''iDRAC to Domain Admin''

#infosec #pentest #redteam #blueteam
https://t.co/MMfu5LZuYn

[Florian Hansemann @CyberWarship]

''ShadowHound: A SharpHound Alternative Using Native PowerShell''

#infosec #pentest #redteam #blueteam
https://t.co/zeBk867DvQ

[DirectoryRanger @DirectoryRanger]

PipeViewer. GUI tool for viewing Windows Named Pipes and searching for insecure permissions
https://t.co/LrkYHmkITa

[Binni Shah @binitamshah]

Active Directory Hardening Series - Part 1 – Disabling NTLMv1 : https://t.co/E6Tlm28z60

Part 2 – Removing SMBv1 :
https://t.co/Y9d0ivLhhy

Part 3 – Enforcing LDAP Signing : https://t.co/xxQHVXWa1Z

Part 4 – Enforcing AES for Kerberos : https://t.co/FwycF5gxnD

Part 5 – Enforcing LDAP Channel Binding : https://t.co/ivrFgK1P3X

Part 6 – Enforcing SMB Signing : https://t.co/o4zH4NcCJl

Part 7 – Implementing Least Privilege : https://t.co/HDWNRfpsnI

[Thorsten E. @endi24]

Windows 11 24H2 vs 23H2 performance benchmark in 2025, clean install vs in-place upgrade - Neowin https://t.co/lZreJiAd53

[Matt Zorich @reprise_99]

The blue team when a vendor asks for their application to be added to domain and global admin

[David das Neves @david_das_neves]

[𝗧𝗼𝗼𝗹] 🛠️ - AD Miner
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses.

Repo - 🔗 https://t.co/udIYgkgqU2

#CyberSecurity #ActiveDirectory

[Thorsten E. @endi24]

Active Directory Hardening Series - Part 7 – Implementing Least Privilege https://t.co/KqHxOfj87G

[DirectoryRanger @DirectoryRanger]

PowerView: Active Directory Enumeration
https://t.co/fAFf83vfz5

[BleepingComputer @BleepinComputer]

Hackers use Windows RID hijacking to create hidden admin account - @billtoulas
https://t.co/CkSBoh7Tkp

https://t.co/CkSBoh7Tkp

[Matt Zorich @reprise_99]

One of our very smart Active Directory experts has been putting together a series of blog posts about hardening AD. Already into its 7th installment, it covers SMB hardening, disabling NTLMv1, least privilege and more. Check the series out - https://t.co/KkKfarAX9a