Anders Kristiansen

Master Information Security.

[Anders Kristiansen @pelsner]

@wizards_magic Make magic magic pls!

[Anders Kristiansen @pelsner]

@matifiedcustoms Nice One. Hopefully I win this ��

[Matified @matifiedcustoms]

🤩!!Foil Playmat Giveaway!!🤩

We would like to giveaway an official Magic the Gathering Dominaria United stained glass playmat that was customized and foiled out by me. All you have to do is:

Follow us
Repost
Like the Post

I'll pick a random winner Sunday 1/25, Good luck to everyone!

[Dirk-jan @_dirkjan]

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3

[Anders Kristiansen @pelsner]

Excited to share my latest blog post on XDR Unified RBAC! I dive deep into how you can streamline security management by unifying role-based access control across your XDR platform.
Check it out here: https://t.co/xwOtXmBAcE

#Security #XDR #RBAC #Cybersecurity #InfoSec

[Tom Warren @tomwarren]

Microsoft is starting to move antivirus providers out of the Windows kernel. Security vendors are about to test new Windows changes in a private preview that's designed to prevent another CrowdStrike incident. Full details and interview 👇 https://t.co/is2UW9LL21

[Microsoft Mechanics @MSFTMechanics]

Detect and shut down token attacks as they happen. Check out token protection enforcement in Microsoft Entra. https://t.co/Xo01N63GYV #TokenProtection

[Anders Kristiansen @pelsner]

@rucam365 Well ok. Thanks for clarifying 😀

[Anders Kristiansen @pelsner]

@_dirkjan Nice one

[Karl @kfosaaen]

Assuming I'm reading this one correctly, this one is a pretty big deal. Continuing my take on it in a thread, but read the blog from @xybytes here:
https://t.co/JQyOpYXx7a

[Gunnar Haslinger @GHaslinger]

Attention IT Pros! The Microsoft UEFI CA, which SecureBoot relies on, will expire on Monday October 19, 2026, after 15 years of validity. Mark this date in your calendar. Devices require a Firmware/DB update; otherwise, stop booting. 🔒#WindowsSecurity
https://t.co/Tl8nF5TdXe

[Anders Kristiansen @pelsner]

This is so important

[Heike Ritter @HeikeRitter]

Secure Oauth applications with App governance - Microsoft App to App protection https://t.co/tdt9OmiQu2

[Anders Kristiansen @pelsner]

Cool new summary rule for log ws https://t.co/R1dtVmj7om

[Anders Kristiansen @pelsner]

@rucam365 Follow best practice, so Yes.

[Anders Kristiansen @pelsner]

@msandbu Great post

[Anders Kristiansen @pelsner]

@karimscloud And you can set higher worklow permission to the GitHub token than set in portal 😃

[Brett Adcock @adcock_brett]

OpenAI + Figure

conversations with humans, on end-to-end neural networks:

→ OpenAI is providing visual reasoning & language understanding
→ Figure's neural networks are delivering fast, low level, dexterous robot actions

(thread below)

[Andy Robbins @_wald0]

Since we're talking about MS Graph...

Did you know that the combination of...

● Organization.ReadWrite.All
● Policy.ReadWrite.AuthenticationMethod

...enables escalation to Global Admin?

Details here: https://t.co/YG3RiH7rw2

Enforce 👏 M 👏 F 👏 A 👏for Global 👏 Admins 👏

[Anders Kristiansen @pelsner]

@_wald0 @StephenHinck Hi are your figure 17 (app permissions use case ) available for download anywhere?