Fusion

The super-secret to reverse engineering? ssshhhhhhhhhhh
don't tell anyone

[Daniel Bradley @DanielatOCN]

Microsoft just added the ability to 𝐝𝐢𝐬𝐚𝐛𝐥𝐞 𝐠𝐫𝐨𝐮𝐩 𝐧𝐞𝐬𝐭𝐢𝐧𝐠 for groups in Microsoft Entra > https://t.co/5jsqPCxrj9

It's very new, can only be set during group creation and I cannot see any documentation on Microsoft Learn about this yet outside of the Graph API permission reference, but it was caught by my MsDocsTracker!

Very useful for groups that protect sensitive applications or resources where you want every member to be added directly. Check out my article linked above to enable the disableNesting property for groups!
#Entra #News #Microsoft

[Kevin Kaminski @kkaminsk]

Microsoft Entra ID dropped 3 important updates this week that advance its passwordless-first strategy:

1️⃣ SSPR CAPTCHA replaced with behavior-based bot detection
2️⃣ Passwordless password change in My Sign-Ins
3️⃣ Temporary opt-out API for passkeys-by-default

Here's what IT admins need to know 🧵

[Vivek | Cybersecurity @VivekIntel]

💥 Awesome Lists — Curated Security Lists for SOC, DFIR & Threat Hunting

A comprehensive open-source collection of threat hunting, detection engineering, DFIR, and cyber threat intelligence resources. It includes continuously updated IOC feeds, detection lists, YARA rules, and reference datasets for SOC analysts and security researchers.

✨ Features

• 🕵️ Threat hunting keywords, searches & YARA rules
• 📋 Large collection of IOC feeds and detection lists
• 🌐 Continuously updated TLDs, ASNs, TOR nodes & VPN IPs
• 🎯 Detection resources for malware, ransomware & phishing
• 🛡️ Windows, Defender, ClamAV & LOLDrivers detection datasets
• 📊 CTI, SIEM, DFIR, Purple Team & investigation resources
• 📚 Security training materials, books, labs & knowledge sites
• 🔄 Frequently updated with automation for fresh threat intelligence

🔗 https://t.co/hMK8RFKLRx

#ThreatHunting #ThreatIntelligence #DFIR #SOC #DetectionEngineering #YARA #CyberSecurity #OpenSource #BlueTeam #CTI

[Cyb3rn3t1c5✨🧕🏾 @cyb3rn3t1cs]

Deploying Microsoft Intune with Microsoft Sentinel integration to strengthen endpoint security and threat detection was so relaxing

[Speaker 25 @rodtrent]

Hardening Microsoft Copilot: Security Best Practices for Enterprise Rollouts https://t.co/GYQeVXqQyV

#AI #ResponsibleAI #Security #Cybersecurity

[Nicolas Krassas @Dinosn]

Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) https://t.co/ZQ316QcGE1

[Rudy Ooms @Mister_MDM]

The Intune Sync button is finally getting a real upgrade.

It will now (yes now!!) trigger the regular MDM policy check-in and also wake up the Intune Management Extension (IME) workloads, such as Win32 apps, PowerShell scripts, and Remediations.

The best thing? The Win32 app part is already in production!

https://t.co/yVuFVOlZ6I

#Intune #MSIntune @IntuneSuppTeam

[Tanner @wbmmfq]

New Kali365 cluster of domains registered on @Dynadot (corrected):

kazaa[.]live
kazab[.]live
kazac[.]live
kazad[.]live
kazae[.]live
kazaf[.]live
kazah[.]live
kazaj[.]live
kazak[.]live
kazal[.]live
kazam[.]live
kazao[.]live
kazap[.]live
kazaq[.]live
kazar[.]live
kazas[.]live
kazat[.]live
kazau[.]live
kazaw[.]live
kazax[.]live
kazay[.]live
kazaz[.]live
kazse[.]live
kazsq[.]live
kazsr[.]live
kazst[.]live
kazsw[.]live
kazsy[.]live

[Bert-Jan 🛡️ @BertJanCyber]

This is a much needed role! No need to multiple low priv or one high priv role anymore. This allows for the right visibility and response capabilities.

[Steven Lim @0x534c]

🔑 𝗩𝗶𝘀𝗵𝗶𝗻𝗴 𝗮𝗰𝘁𝗼𝗿𝘀 𝘁𝗮𝗿𝗴𝗲𝘁 𝗘𝗻𝘁𝗿𝗮 𝗽𝗮𝘀𝘀𝗸𝗲𝘆 𝗲𝗻𝗿𝗼𝗹𝗹𝗺𝗲𝗻𝘁

On 06 July 2026, Okta Threat Intelligence article shared a threat actor tracked as O-UNC-066 (also known as "Pink" by Palo Alto Networks Unit 42) has deployed a panel-controlled phishing kit targeting the passkey enrollment process for Microsoft 365 customers.

https://t.co/hJHW9Tes1d

Using Silent Push context graph search and pivoting on their common DNS nameservers infrastructure, additional passkey related domains that was uncovered and not shared in the Okta Intelligence Report. With these new additional passkey related domains gathered I have build a KQL detection for this Passkey Enrollment phishing detection for O-UNC-066. Fellow defenders can access the shared code at https://t.co/TKwVrjaSF8 SLimKQL2026.🫡

https://t.co/gs3Pg2daqJ

#UNC66 #PasskeyEnrollmentPhishing #ThreatDetection

[The Hacker News @TheHackersNews]

🚨 Hackers are using fake #Microsoft Entra passkey pages to target Microsoft 365 accounts.

The vishing campaign steals credentials and MFA responses, then attempts to register attacker-controlled passkeys while adapting to prompts in real time.

Read how the attack works: https://t.co/Fau7qSUemw

[XDA @xdadevelopers]

GOG calls Linux "the next major frontier" for gaming as it works on a native client
https://t.co/MuFUL0b48Y

[TRÄW🤟 @thatstraw]

I'll take Linux stability over any of these so-called Windows 'advantages'.

[Fusion @fu51on__]

@andrew_gubskiy @VideoCardz It has nothing to do with affording anything.

[Fusion @fu51on__]

@torgojones @pcgamer Windows is aids

[PC Gamer @pcgamer]

Gaming on Linux just got a bump with new Wine 11 improvements that'll make for a better Proton on SteamOS, too https://t.co/ngKBs5SkOn

[Fusion @fu51on__]

@DoingFedTime lol they should rename to bluecloud

[It's FOSS @Itsfoss]

Linux beginners selecting distros be like. 👇

[XDA @xdadevelopers]

Over 1,500,000 Windows users downloaded this Linux distro in under three months
https://t.co/U7d8ngyxi4

[Fusion @fu51on__]

@xdadevelopers What would you say the missing 10% is?