William Touzalin

🚨 Security professionals and tech enthusiasts — this one’s for you! We’re excited to share the latest article from the Microsoft Tech Community, authored by Jacques Guibert De Bruet! 🔍 Title: Microsoft Sentinel’s New Data Lake: Cut Costs & Boost Threat Detection This article explores how Microsoft Sentinel’s new data lake architecture is transforming the way organizations manage security operations — cutting costs while enhancing threat detection. A must-read for anyone working with SIEM, SOAR, or data lake strategies. 📖 Read it here: https://lnkd.in/gAJjN-Bv 💡 Whether you're in cybersecurity, cloud architecture, or data engineering — this piece offers valuable insights into optimizing your security infrastructure. 📢 Feel free to share it with your network and help spread the word! #SkilledByMTT #CyberSecurity

17

2 commentaires

Kubernetes security shouldn't stop at the cluster. Traditional CNIs and service meshes leave critical gaps in identity, segmentation, and traffic control—especially in multicloud environments. The Aviatrix Kubernetes Firewall closes these gaps with: • Identity-based segmentation across clouds • Advanced NAT for containerized workloads • Unified policies for VMs and containers Learn how to scale Kubernetes security the right way. 🔗 Get the fast facts: https://loom.ly/eK5x2gw #KubernetesSecurity #CloudNetworking #Multicloud #CloudSecurity #DevSecOps

23

FreeBSD Now Builds Reproducibly and Without Root Privilege We’re pleased to share that the FreeBSD Project now supports builds without requiring root privileges, removing elevated access from the release pipeline and improving overall security. This work was completed as part of a program commissioned by the Sovereign Tech Agency . The updates are available in the FreeBSD development branch and are being merged into the FreeBSD 15.0 release branch. This milestone also introduces bit-for-bit reproducible builds, strengthening supply-chain integrity and improving verification for downstream users and contributors. Read more: https://lnkd.in/gXqrKyZT #FreeBSD #ReproducibleBuilds #OpenSource #Security

162

3 commentaires

Ransomware vs EDR: Inside the Attacker's Mind – Zoziel Freire reveals how attackers bypass EDRs with cross-platform ransomware, persistence tricks, and live PoCs. Gain insight into attacker mindsets and blind spots at the Red Team Village during Def Con 33!

106

1 commentaire

Setting up a custom domain in Microsoft Entra ID is more than a branding choice – it’s a foundation for secure, consistent identity management across Microsoft 365 and Azure. In this guide, we break down why custom domains matter, how to configure them correctly, and common mistakes to avoid – especially in regulated or government-adjacent environments. Read the full guide: https://lnkd.in/e2pSZ4Cr

19

Kron PAM Endpoint Privilege Management (EPM): Eliminating Excess Privileges on Endpoints Endpoints are among the most exploited attack surfaces — with over 70% of ransomware attacks in 2024 originating from compromised endpoints with local admin rights. Permanent privileges give attackers the perfect entry point to install malware, disable defenses, and move laterally. Kron PAM EPM addresses this risk by delivering: ✔️ Strong authentication with AD/LDAP + MFA ✔️ Application discovery and control to expose Shadow IT ✔️ Policy-based privilege elevation — from always-on to just-in-time ✔️ Full admin oversight with approve/deny/revoke workflows ✔️ Complete audit trails for compliance and investigations With least privilege, application control, and auditability, Kron PAM EPM turns endpoints from the weakest link into a resilient part of your IT ecosystem. 🔗 https://lnkd.in/dSWa-q4d #KronPAM #Kron #Krontech #Cybersecurity #EndpointSecurity #PAM #EPM #ZeroTrust #AccessManagement #IdentitySecurity

41

1 commentaire

GreyNoise observed exploitation of CitrixBleed 2 (CVE-2025-5777) nearly two weeks before a public PoC was released. 📖 Read the full blog: https://lnkd.in/e_4rXXCW ✅ First seen: June 23 ✅ PoC released: July 4 ✅ Tag published: July 7 ✅ CISA reached out: July 9 (before KEV addition) Early malicious activity came from China-based IPs and specifically targeted Citrix NetScaler devices, not generic sensors. We've published a breakdown of what we saw and how defenders can take action now. #GreyNoise #ThreatIntel #CitrixBleed #Citrix #NetScaler #CitrixNetScaler #Exploitation #CVE #CVE20255777 #CISA #PoC #Cybersecurity

49

📣 Today I’m excited to share jrun — our first open-source project we’re giving back to the community: https://lnkd.in/ex_hY5AT It’s a missing tool that helps close one of the clearest gaps in the FreeBSD ecosystem, bringing FreeBSD isolation primitives closer to developers who prefer macOS or Linux for daily work. With a simple CLI and declarative UCL configs, you can spin up a FreeBSD VM, provision and compose jails, wire services together, and access everything from the host. Check out the README to learn more.

200

15 commentaires

[𝐍𝐞𝐰 𝐚𝐫𝐭𝐢𝐜𝐥𝐞 𝐚𝐥𝐞𝐫𝐭] What if attackers could turn your own administrative tools into secret weapons? How does the manipulation of Group Policy Objects (GPOs) enable stealthy lateral movement inside networks?   In an in-depth article from Intrinsec’s Red Team, discover how attackers exploit GPOs using filtering techniques like script-based targeting, item-level targeting, and security filtering to precisely control their malicious deployments. This lets them stay undetected while compromising selected assets, even in environments with strict firewall policies blocking traditional attack paths.   Read the full article here : https://lnkd.in/eHA7GSN8 Credit to : Paul Saladin #RedTeam #Cybersecurity #GPOAbuse #LateralMovement #Intrinsec

32

2 commentaires

🛑 Grafana warns that CVE-2025-41115, a maximum-severity flaw in Grafana Enterprise, can let a malicious SCIM client impersonate an internal user — even an admin — when SCIM provisioning is enabled. 🔧 Only Enterprise editions with SCIM turned on are affected; patches are available, and disabling SCIM also mitigates the issue. ➡️ https://lnkd.in/dcEa7HMV #cybersecurity #grafana

13

The Kubernetes Gateway API is revolutionizing how traffic is managed and secured in cloud-native environments. Ready to unlock its full potential? Check out our comprehensive guide to learn: 🔑 Key features of the Gateway API 📊 How it simplifies traffic routing and enhances security ⚙️ Steps to implement it in your Kubernetes environment 📘 Access the guide here: https://lnkd.in/e6R4Hj7W #Kubernetes #GatewayAPI #CloudSecurity

8

🚨 Critical #Veeam RCE Vulnerability Patched – CVE-2025-23121 Veeam just released a security update addressing 3 major vulnerabilities – including a critical #RCE flaw (CVSS 9.9) that could allow domain users to execute remote code on #backup servers. 🔐 CVE-2025-23121 is a bypass of a previously patched bug, CVE-2025-23120, highlighting how persistent attackers evolve to regain #access. Other flaws addressed: 🔸 CVE-2025-24286: Potential backup job manipulation 🔹 CVE-2025-24287: Local privilege escalation via Veeam Agent for #Windows ➡️ https://lnkd.in/dARzywTa #PatchNow #CyberSecurity #VulnerabilityManagement #ThreatIntelligence

12

Security tools alone can’t secure your code — developers can. As Serge Borso, SANS Instructor & AppSec Expert, explains: tools flag flaws, but developers prevent them. Empower people, not just processes. ✊ 🔗 See how a human-centered approach turns AppSec into a strategic advantage → https://go.sans.org/TG4rs0 #AppSec #DevSecOps #SecureCoding

21