Julie Smith

Cyber professional

[Julie Smith @juliesmi]

@EricaZelic I appreciate your work, keep it up!

[Microsoft Threat Intelligence @MsftSecIntel]

A vulnerability in macOS, identified as CVE-2021-30970 and fixed by Apple in December, could allow an attacker to bypass Transparency, Consent, and Control (TCC) and gain unauthorized access to protected data. Read our analysis via @yo_yo_yo_jbo: https://t.co/vkkIw2HdZp

[James Chinn @_jameschinn]

Little Bobby Tables has changed his attack vector 😂 #log4j #Log4Shell #infosecurity #infosec

[Dr. Nestori Syynimaa @DrAzureAD]

Want to know why threat actors are so interested in Microsoft Partners and Delegated Administrative Privileges (DAP)?

Check my blog at https://t.co/pyuhHKVJaP
#AzureAD #blueteam #redteam #infosec #AADInternals

[Ax Sharma @Ax_Sharma]

PoC exploit now out for Azure Active Directory brute forcing flaw. Microsoft maintains it's not a vulnerability but appears to be working on a solution.

Includes additional commentary from @DrAzureAD
@Secureworks.
👇👇👇
https://t.co/FihlJ2pAta

[SecurityWeek @SecurityWeek]

Hundreds of Thousands of Credentials Leaked Due to Microsoft Exchange Protocol Flaw https://t.co/oFQcN3Vcpk

[inversecos @inversecos]

Backdoor #Office365 and #Azure AD by stealing AD FS certificate/key pair. Golden SAML attack will allow an attacker to:

> Bypass MFA to Azure / Office365
> Logon as any AD user regardless of password resets
> Method is usually valid for a year

https://t.co/16L9k10tB7

[Heike Ritter @HeikeRitter]

Another great read for you all! "A deep-dive into the #SolarWinds Serv-U SSH vulnerability" https://t.co/Nhco1lfE6U #cybersecurity #threatprotection @msftsecurity

[Joe Stocker @ITguySoCal]

(1/x) M365 changes to be aware of
1) End-users can purchase PowerBI on their on personal credit cards to bypass IT
2) End-users can purchase Windows 365 Cloud PC VMs on their own personal credit cards to bypass IT
3) End-users can create security groups (even if you disabled it)

[The Hacker News @TheHackersNews]

Researchers have uncovered a new class of vulnerabilities affecting major managed DNS providers that could allow attackers to spy on massive amount of DNS traffic and exfiltrate sensitive information from corporate networks.

Read: https://t.co/uQTMMaoElx

#infosec #cybersecurity

[Nicolas Krassas @Dinosn]

LockBit 2.0, the first ransomware that uses group policies to encrypt Windows domains https://t.co/GN8zYkX697

[Nicolas Krassas @Dinosn]

Microsoft Rushes Fix For PetitPotam Attack PoC https://t.co/w6EpPdzXdJ

[Nicolas Krassas @Dinosn]

HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11 https://t.co/swLeRXnCHZ

[Julie Smith @juliesmi]

@360_trader @littlecaesars Little Caesars used to be garbage, but they've really improved the quality of the product in recent years. Can't beat a deep dish for $8.

[briankrebs @briankrebs]

Malicious Office365 apps are the ultimate insiders: They bypass 2FA, survive password resets, & give attackers launching point for more attacks. New research shows they're very effective at getting bad guys inside O365 organizations. https://t.co/orTC5b2ENA

[Dr. Nestori Syynimaa @DrAzureAD]

New version of #AADInternals out now, including remote dumping of #ADFS configuration database🔥

Read the blog at: https://t.co/ccvCSYovhr

Credits to @vesat, @doughsec, @BakedSec, @_dirkjan, @gentilkiwi, @MGrafnetter, and @Cyb3rWard0g for your help and previous work!

[Dirk-jan @_dirkjan]

What a time to be alive... Install the Microsoft signed Hybrid Connection Manager on victim host, link it up with your Azure app, enjoy persistent access to the on-prem network from your Azure portal. Only needs https outbound to Azure and line of sight from victim to target host

[Real Vision @RealVision]

The #CryptoGathering #Sweepstakes 🚀

1 lucky person will receive $4500 in #BTC by the time this is over...

❤️/RT this post & follow @RealVision for a chance to #win.

🏆 will be announced 03/26 6pm ET here & at the event. https://t.co/DmHbGWeoAx

Terms👉 https://t.co/UgYCevNWHm

[Nicolas Krassas @Dinosn]

Attacks Spike Following The Disclosure Of CVE-2021-22986: F5 Networks BIG-IP iControl Remote Command Execution Vulnerability https://t.co/Y9M5jlr3R5

[Phillip Misner @phillip_misner]

Microsoft observed a new family of human operated ransomware attack customers – detected as Ransom:Win32/DoejoCrypt.A. Human operated ransomware attacks are utilizing the Microsoft Exchange vulnerabilities to exploit customers. #DearCry @MsftSecIntel