Alan M. Cohen

Father of 2 | Husband | Cloud Architect @ Nebulan Argentina. Former Senior Premier Field Engineer @ Microsoft.

[Alan M. Cohen @alancohen]

@Eric29761 no...

[Alan M. Cohen @alancohen]

@La2zarini @Culture_Crit Diagonal Norte y Maipú

[Alan M. Cohen @alancohen]

@BlingeCJS @BarrySheehan @FabriCaradonna @Culture_Crit The second pic may have been taken on Peru street and Hipólito Yrigoyen Ave., in the same square as the Cabildo

[Merill Fernando @merill]

ICYMI we shared our quarterly update of Entra change announcements last week.

Here is a quick summary. 👇

I have highlighted the delta of new changes.

[Alan M. Cohen @alancohen]

@SandraJessicaLo @todonoticias

[Alan M. Cohen @alancohen]

@jhencinski While requiring MFA registration from a location marked as trusted prevents an attacker from registering a new device in MFA, it doesn't stop session cookie theft from happening. I would suggest adding device compliance policies in CA to combat that type of attack.

[Alan M. Cohen @alancohen]

@ITguySoCal @jhencinski Temporary Access Pass could be used in that scenario.

[Alan M. Cohen @alancohen]

@1ZRR4H @malwrhunterteam @Microsoft @digitalocean @SkynetLabs @JAMESWT_MHT @StopMalvertisin @0xDanielLopez @idclickthat @mrd0x @BushidoToken @faisalusuf Más que compromiso de subdominios, parece un abuso de la plataforma de formularios de feedback Customer Voice. Cualquier tenant de Dynamics 365 puede colgar allí formularios públicos con links. La duda es por qué MS no chequea lo que los clientes suben...

[Alan M. Cohen @alancohen]

@BushidoToken @GossiTheDog Maybe not in this case, because links that contain both ncv[.]microsoft[.].com and ecv[.]microsoft[.].com domains take you to customervoice[.].microsoft[.]com, a legitimate Microsoft resource where several feedback forms are hosted (benign or otherwise)

[Alan M. Cohen @alancohen]

@GossiTheDog I believe bad actors are just hosting phishing links in feedback forms created and hosted on a legitimate platform (Dynamics 365 Customer Voice).

[Kenneth van Surksum - MVP @kennethvs]

New grant control in #AzureAD #ConditionalAccess called "Require authentication strength" in preview. Allows you to specify requirements for MFA strength, and f.e. exclude SMS as MFA factor in certain CA policies

[Alan M. Cohen @alancohen]

@GossiTheDog The gift that keeps on giving

[Alan M. Cohen @alancohen]

@GossiTheDog Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAllDomains

[Alan M. Cohen @alancohen]

@GossiTheDog not that fast! If you want to be ¨*really* protected for CVE-2022-21978, installing the SU is not enough. You'll also need to run the Exchange setup program from the cmd prompt, and use the /preparealldomains switch

[Alan M. Cohen @alancohen]

@RedFyv3 @GossiTheDog You have a list here, and it includes CUs and SUs: https://t.co/dCQkYm4d6y

[Alan M. Cohen @alancohen]

@GossiTheDog Reference: https://t.co/P0FT9CIyxi

[Alan M. Cohen @alancohen]

@GossiTheDog Yeah, they are! These are the upgrade paths available today:

[Alan M. Cohen @alancohen]

@BancoNacion @kas027 A mí también me figura pago fallido con Previaje y QR desde BNA+, en varios comercios de la costa Atlántica. En atención al cliente me derivaron al 08104447827 y cuando llamo el número está fuera de servicio según Telecom...

[Alan M. Cohen @alancohen]

@BancoNacion no da solución a mi problema con BNA+ y pagos con QR usando tarjeta Previaje. Horas hasta conseguir hablar con alguien de Atención al cliente, y luego "se corta" la comunicación. Y @TurDepAR me derivó a un 0810 de @BancoNacion que ni funciona.