Pjoter

Senior Technical Program Manager @ Teams Engineering MSFT | Retired MVP | hack the planet | RT player | Sentinel jedi | Guitarist \m/.

[Pjoter @pjter]

@niebezpiecznik Czy sugerujesz złośliwe exit node i wypełnienie sieci w Polsce złośliwymi węzłami 🍷

[Pjoter @pjter]

I am excited to share what our team’s been building for Ignite: https://t.co/VkGBtF7m6r
Download mindmap, checklist and blueprint here!
We are working on next version to include A365 and more! #Copilot #AgentBlueprint #AgentGovernance #M365Copilot #MCS

[vx-underground @vxunderground]

tl;dr archived stuff, see link below

Earlier today a GitHub titled "I-S00N" leaked supposedly sensitive Chinese government data - specifically related to offensive cyber security.

The initial discovery, and documentation of the documents, derive from @AzakaSekai_. We have archived his research and notes on the material.

It should be noted that they *probably have not covered the material in totality and more information can be expected to be released in the following days from either Azaka, or other Cyber Threat Intelligence experts familiar with Chinese state-sponsored activity.

Furthermore, the materials are written in Mandarin. We have made no attempt to translate the material to English and we do not speak Mandarin, hence we cannot provide any opinion or speculation on the material. We will leave that painstaking task to individuals who speak Mandarin, or people who feel like trying to translate the documents accurately.

What an exciting start to the week:)

You can view the archived materials here: https://t.co/pAmOcvbTV5

[Pjoter @pjter]

@JakubMokotow @MorawieckiM Wcielić do armii pajaca i do pilnowania granic. Ciemnogród ma swoje miejsce w lesie pod granicami.

[Pjoter @pjter]

@niebezpiecznik Nazwy dokładnej nie pamietam - ustrojstwo na DOSie i pamiętam wtedy pierwszą zabawę z mks_wir 😁

[FBI @FBI]

Check out the latest #CybersecurityAdvisory issued by the UK and US to help organizations counter malicious cyber activity by APT28 actors to exploit weak Cisco routers. Read more for recommendations to defend your network against this activity: https://t.co/4OHdXKeEsu

[Pjoter @pjter]

@reprise_99 Sysmon with good config installed on every machine for the win 😁, but question is how your Siem or log collector analytics and logic or hunting consume this awesome knowledge.

[Pjoter @pjter]

The LAPS is now a native part of Windows and includes many new features in build W11 Insider B 25145 https://t.co/p40xLazita

[Pjoter @pjter]

@0gtweet Enterprise customers managing updates should select the detection build 1.367.719.0  or newer and deploy it across their environments.
Microsoft Defender for Endpoint provides customers detection and alerts for the described vulnerability.

[Pjoter @pjter]

Olympic app security https://t.co/eFYRTGPGPY

[ZaufanaTrzeciaStrona @zaufanatrzeciastrona@infosec @Zaufana3Strona]

Rząd Izraela mocno ograniczył listę krajów, do których można eksportować cyberbroń. Z listy zniknęło wiele krajów autorytarnych oraz Polska i Węgry.

[Michael LaMontagne @RealTimeUC]

#MicrosoftTeams admin center now has #CloudShell!
(not showing in all tenants yet, must be rolling out). #PowerShellInTheBrowser

[Pjoter @pjter]

Don't miss the latest innovations in Teams Phone at Ignite. Session on Nov. 3, 10:30 AM PST.
Add it to your calendar today! https://t.co/WLO3tpcoZZ

[ZaufanaTrzeciaStrona @zaufanatrzeciastrona@infosec @Zaufana3Strona]

Specjaliści z Polski oferują pomoc FB

[Pjoter @pjter]

https://t.co/LPw8nkLGru

[Charlie Clark @exploitph]

It's been a long road but it's finally here. It's been great working on this with @_EthicalChaos_, I learned so much! Special thanks to @harmj0y for the original tool and putting up with me through development ;-) Say hello to Rubeus 2.0:

https://t.co/fHwCfpr1e6

[Mark Loman @markloman]

We are monitoring a REvil 'supply chain' attack outbreak, which seems to stem from a malicious Kaseya update. REvil binary C:\Windows\mpsvc.dll is side-loaded into a legit Microsoft Defender copy, copied into C:\Windows\MsMpEng.exe to run the encryption from a legit process.

[Florian Hansemann @CyberWarship]

Invoke-ACLpwn
Invoke-ACLpwn is a tool that automates the discovery and pwnage of ACLs in Active Directory that are unsafe configured.

- thanks for sharing @foxit

#infosec #pentest #redteam
https://t.co/GIQgLF0nLb

[Pjoter @pjter]

winget upgrade --all; się dla mnie bardzo podoba. Więcej: https://t.co/Fuqi6RvPhk