#mdo — Public Fediverse posts

Heftiger Vortrag: Florian Schlüter von #OHBDigitalConnect über das vernetzte Gefechtsfeld (Multidomain Operations): Moderne Sicherheit hängt davon ab, Daten aus Land, Luft, See, Weltraum und Cyberraum schnell zusammenzuführen. Digitalisierung und KI werden zur strategischen Infrastruktur - und das bedeutet auch große Verantwortung.

#Augsburg #Sparkscon #MDO #SecurityTech #KeinOfflineModus

@incentive mdo
#mdo #freebsd

Aviation weather for Middleton Is airport in Middleton Island area (USA) is “METAR PAMD 260656Z AUTO 15020KT 10SM BKN010 OVC015 05/04 A2968 RMK AO2 RAE14 CIG 008V012 SLP050 P0000 T00500039 $” : See what it means on https://www.bigorre.org/aero/meteo/pamd/en #middletonisairport #airport #middletonisland #usa #pamd #mdo #metar #aviation #aviationweather #avgeek vl

Aviation weather for Middleton Is airport in Middleton Island area (USA) is “SPECI PAMD 171722Z AUTO 19012KT 9SM FEW006 BKN010 OVC034 06/06 A2963 RMK AO2 RAE09 P0000 $” : See what it means on https://www.bigorre.org/aero/meteo/pamd/en #middletonisairport #airport #middletonisland #usa #pamd #mdo #metar #aviation #aviationweather #avgeek vl

I’ve been replacing sudo/doas on most of my FreeBSD boxes with something much smaller: mdo(1) + mac_do(4) from base.

No port. No sudoers parser. No setuid helper. Just a kernel MAC policy, a sysctl rule, and an explicit “SSH is the gate” security model.

Wrote up the full walkthrough for FreeBSD 15, including rule syntax, examples, caveats, and my surrounding hardening sysctls:

https://blog.hofstede.it/mdo-on-freebsd-15-base-system-privilege-delegation-with-mac_do/

#FreeBSD #runbsd #mdo #mac_do #sysadmin #security

New 𝗨𝗽𝗹𝗶𝗳𝘁 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲𝘀 𝗼𝗻 𝗙𝗿𝗲𝗲𝗕𝗦𝗗 [Uplift Privileges on FreeBSD] article on vermaden.wordpress.com blog

https://vermaden.wordpress.com/2026/03/01/uplift-privileges-on-freebsd/

#verblog #freebsd #linux #illumos #solaris #sudo #doas #su #mdo

Aviation weather for Middleton Is airport in Middleton Island area (USA) is “PAMD 212156Z AUTO 36007KT 10SM CLR M02/M10 A3042 RMK AO2 SLP303 T10221100 FZRANO $” : See what it means on https://www.bigorre.org/aero/meteo/pamd/en #middletonisairport #airport #middletonisland #usa #pamd #mdo #metar #aviation #aviationweather #avgeek vl

Aviation weather for Middleton Is airport in Middleton Island area (USA) is “PAMD 042356Z AUTO 28008KT 9SM OVC016 06/05 A2998 RMK AO2 SLP152 T00610050 10067 20061 57006” : See what it means on https://www.bigorre.org/aero/meteo/pamd/en #middletonisairport #airport #middletonisland #usa #pamd #mdo #metar #aviation #aviationweather #avgeek vl

One specific change I noticed is that #Safelink capabilities are moved from add-on #MDO to E3 & Business plans, which I've been advocating for (IMHO this is basic security). As #Phishing or #BEC impact is still high according to #Microsoft Digital Defense Report 2025, this is a change that can make #security defense more in-depth.
Reread the report: https://www.microsoft.com/en-us/corporate-responsibility/cybersecurity/microsoft-digital-defense-report-2025/?wt.mc_id=M365-MVP-5000976

What do you think of these changes? Is the price increase warranted? What did you miss and wanted to see? Let me know!

It will be available in #MDO Plan 1 and wil be enabled for Teams per default from 6 januari 2026. If you need exclusions, go to #Defender > System> Settings> Email & Collaboration> Microsoft Teams protection. The article https://learn.microsoft.com/en-us/defender-office-365/mdo-support-teams-about?wt.mc_id=M365-MVP-5000976 forgot "System".

How many runways can you see for Middleton Is airport in Middleton Island area (USA) ? : The answer is on https://www.bigorre.org/aero/meteo/pamd/en #middletonisland #usa #middletonisairport #pamd #mdo #airport #aviation #avgeek vl

How many runways can you see for Middleton Is airport in Middleton Island area (USA) ? : The answer is on https://www.bigorre.org/aero/meteo/pamd/en #middletonisland #usa #middletonisairport #pamd #mdo #airport #aviation #avgeek vii3

Aviation weather for Middleton Is airport in Middleton Island area (USA) is “PAMD 081956Z AUTO 23007KT 10SM FEW012 OVC085 14/11 A2988 RMK AO2 SLP117 T01390111 $” : See what it means on https://www.bigorre.org/aero/meteo/pamd/en #middletonisland #usa #middletonisairport #pamd #mdo #metar #aviation #aviationweather #avgeek #airport vl

GEMSEO is an open source Python library that enables users to run Multidisciplinary Analysis and Optimization (MDO) with a generic strategy and automatic workflow reconfiguration.
https://gemseo.readthedocs.io/en/stable/
#MDO #FOSS #Optimization #UQ

𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐄𝐱𝐩𝐞𝐫𝐭𝐬’ 𝐫𝐞𝐜𝐨𝐦𝐦𝐞𝐧𝐝𝐚𝐭𝐢𝐨𝐧𝐬 𝐟𝐨𝐫 𝐢𝐦𝐩𝐚𝐜𝐭𝐟𝐮𝐥 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐨𝐬𝐭𝐮𝐫𝐞 𝐦𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭

The Microsoft Defender Experts for XDR service provides value to customers from both a proactive and reactive perspective.

While the basics of security hygiene, such as patching, inventory, security baselining, and least privilege delegations are undeniably important, once those bases are covered there are many more specific controls that receive less attention but can be critical in mitigating the frequency and impact of future incidents.

Top Configuration Recommendations:

Defender for Office 365

➡ Restrict user ability to release emails from quarantine

Defender for Endpoint

➡Enable tamper protection

➡Enable network protection in block mode

➡Block untrusted and unsigned processes that run from USB

➡Block JavaScript or VBScript from launching downloaded executable content

➡Block executable content from email client and webmail

Entra ID

➡Ensure multifactor authentication (MFA) is enabled for all users in administrative roles in Entra ID

➡Require MFA for self-service password reset (SSPR)

Defender for Identity

➡Set a honeytoken account

https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/defender-experts-recommendations-for-impactful-security-posture/ba-p/4040147

#defender #experts #xdr #edr #mde #mdi #mdo #entraid #azuread #microsoft #microsoftsecurity #azure #cloudsecurity #cloudnative #soc #cybersecurity #MXDR #triage #investigate #respond #prevent #quarantine #mfa #asr #deception

𝐏𝐫𝐨𝐭𝐞𝐜𝐭 𝐲𝐨𝐮𝐫 𝐨𝐫𝐠𝐚𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐠𝐚𝐢𝐧𝐬𝐭 𝐐𝐑 𝐜𝐨𝐝𝐞 𝐩𝐡𝐢𝐬𝐡𝐢𝐧𝐠 𝐰𝐢𝐭𝐡 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐎𝐟𝐟𝐢𝐜𝐞 365

QR codes are used in phishing attacks for mainly two reasons:

1️⃣ They move the attack away from well-protected corporate environments and onto the victim’s personally owned mobile device, which may be less secure.

2️⃣ They leverage the most common credential theft vector which is the uniform resource locator (URL).

𝐇𝐨𝐰 𝐌𝐃𝐎 𝐝𝐞𝐭𝐞𝐜𝐭𝐬 𝐐𝐑 𝐂𝐨𝐝𝐞 𝐩𝐡𝐢𝐬𝐡𝐢𝐧𝐠

➡ Image Detection in a message inline during mail flow

➡Threat Signals

➡URL Analysis

➡Heuristics-based Rules

To further increase protection, it is recommended to use:

➡𝐄𝐱𝐭𝐞𝐧𝐝𝐞𝐝 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐚𝐧𝐝 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 (XDR): Microsoft Defender XDR provides comprehensive defense against advanced threats like QR code phishing

➡𝐌𝐨𝐛𝐢𝐥𝐞 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧: Microsoft Defender for Endpoint on Android and iOS includes anti-phishing capabilities that also apply to QR code phishing attacks, blocking phishing sites from being accessed.

➡𝐄𝐧𝐝-𝐔𝐬𝐞𝐫 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠: Defender for Office 365 customers can use Attack Simulation Training to educate their end users by simulating real-world phishing attacks and other types of cyber threats.

https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/protect-your-organizations-against-qr-code-phishing-with/ba-p/4007041

#qrcode #phishing #mdo #defenderforoffice #defender #xdr #edr #office365 #image #url #microsoft #microsoftsecurity #soc #cyber #cybersecurity #ast #usertraining #awareness #Quishing #cloudsecurity

𝐆𝐞𝐭 𝐢𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐮𝐩𝐝𝐚𝐭𝐞𝐬 𝐟𝐫𝐨𝐦 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐄𝐱𝐩𝐞𝐫𝐭𝐬 𝐟𝐨𝐫 𝐗𝐃𝐑 𝐢𝐧 𝐭𝐡𝐞 𝐒𝐎𝐂 𝐭𝐨𝐨𝐥𝐬 𝐲𝐨𝐮 𝐮𝐬𝐞

Microsoft Defender Experts for XDR is a managed extended detection and response service that augments security operations centers (SOCs) for customers who use Microsoft 365 Defender services:

▶️Microsoft Defender for Endpoint

▶️Microsoft Defender for Office 365

▶️Microsoft Defender for Identity

▶️Microsoft Defender for Cloud Apps

▶️Microsoft Entra AD

Through a combination of automation and human expertise, it triages Microsoft 365 Defender incidents, prioritizes them on your behalf, filters out the noise, carries out detailed investigations, and provides actionable response to your SOC.

In this blogpost, we share how you can get incident updates from the investigation and response work Defender Experts do – right into the SOC tools you already use.

https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/get-incident-updates-from-defender-experts-for-xdr-in-the-soc/ba-p/3874175

#defender #expert #defenderexpert #xdr #microsoft #soc #siem #soar #analyst #investigation #triage #managedextendeddetectionresponse #managedxdr #managedservice #mssp #mde #mdo #mdi #entraid #azuread #cloud #cloudnative #cloudsecurity

𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐓𝐞𝐚𝐦𝐬 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐨𝐰𝐞𝐫𝐞𝐝 𝐛𝐲 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐎𝐟𝐟𝐢𝐜𝐞 𝟑𝟔𝟓 𝐏𝟐

With the increased use of collaboration tools like Microsoft Teams, the possibility of malicious attacks using chat messages has also increased.

In addition to 𝐒𝐚𝐟𝐞 𝐋𝐢𝐧𝐤𝐬 and 𝐒𝐚𝐟𝐞 𝐀𝐭𝐭𝐚𝐜𝐡𝐦𝐞𝐧𝐭s. Microsoft Defender for Office 365 provides following features:

👉🏻𝐑𝐞𝐩𝐨𝐫𝐭 𝐬𝐮𝐬𝐩𝐢𝐜𝐢𝐨𝐮𝐬 𝐓𝐞𝐚𝐦𝐬 𝐦𝐞𝐬𝐬𝐚𝐠𝐞𝐬: Users can report malicious Teams messages.

👉🏻𝐙𝐞𝐫𝐨-𝐡𝐨𝐮𝐫 𝐚𝐮𝐭𝐨 𝐩𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 (𝐙𝐀𝐏) 𝐟𝐨𝐫 𝐓𝐞𝐚𝐦𝐬: ZAP for Teams quarantines messages in Teams chats or channels that are found to be malware or high confidence phishing.

👉🏻𝐓𝐞𝐚𝐦𝐬 𝐦𝐞𝐬𝐬𝐚𝐠𝐞𝐬 𝐢𝐧 𝐪𝐮𝐚𝐫𝐚𝐧𝐭𝐢𝐧𝐞: As with email messages that are identified as malware or high confidence phishing, only admins are able to manage Teams messages that are quarantined by ZAP for Teams by default.

👉🏻The 𝐓𝐞𝐚𝐦𝐬 𝐌𝐞𝐬𝐬𝐚𝐠𝐞 𝐄𝐧𝐭𝐢𝐭𝐲 𝐏𝐚𝐧𝐞𝐥 is a single place to store all Teams message metadata for immediate SecOps review. Any threats coming from Teams chats, group chats, meeting chats, and other channels can be found in one place as soon as they're assessed. For more information.

👉🏻𝐀𝐭𝐭𝐚𝐜𝐤 𝐬𝐢𝐦𝐮𝐥𝐚𝐭𝐢𝐨𝐧 𝐭𝐫𝐚𝐢𝐧𝐢𝐧𝐠 using Teams messages: To ensure users are resilient to phishing attacks in Microsoft Teams, admins can configure phishing simulations using Teams messages instead of email messages.

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/mdo-support-teams-about?view=o365-worldwide

#microsoft #microsoftdefender #defender #mdo #teams #microsoftteams #soc #phishing #simulationtraining #training #zap #quarantine #cloud #cloudsecurity #soc #cybersecurity #emailsecurity #collaboration #azure

𝗜𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗶𝗻𝗴 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗶𝗻𝘁𝗼 𝘆𝗼𝘂𝗿 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀

The deployment and implementation of the Microsoft 365 Defender platform will need careful planning with the SOC team to optimize the day-to-day operations and lifecycle management of the Microsoft 365 Defender service itself.

This content explores several concepts on how to operationalize and integrate Microsoft 365 Defender with either new or existing people, processes, and technologies that form the basis for modern security operations.

Use these steps to integrate Microsoft 365 Defender into your SOC.

1️⃣Plan for Microsoft 365 Defender operations readiness

2️⃣Perform a SOC integration readiness assessment using the Zero Trust Framework

3️⃣Plan for Microsoft 365 Defender integration with your SOC catalog of services

4️⃣Define Microsoft 365 Defender roles, responsibilities, and oversight

5️⃣Develop and test use cases

6️⃣Identify SOC maintenance tasks

https://learn.microsoft.com/en-us/microsoft-365/security/defender/integrate-microsoft-365-defender-secops?view=o365-worldwide

#m365defender #defender #microsoft #xdr #soc #zerotrust #azure #cloud #cloudsecurity #securityanalyst #mdo #mde #mdi #entraid #mdca

𝗖𝗼𝗻𝗳𝗶𝗴𝘂𝗿𝗲 𝗝𝘂𝘀𝘁-𝗶𝗻-𝗧𝗶𝗺𝗲 𝗔𝗰𝗰𝗲𝘀𝘀 𝘁𝗼 𝗠𝟯𝟲𝟱 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿

🔵Entra ID (formerly Azure AD) offers the Privileged Identity Management (PIM) for Groups feature, enabling users to attain just-in-time membership and ownership of groups, thus governing access to a range of services.

🔵M365 Defender unified RBAC workloads offers centralized permissions management for the following services:

➡️Defender for Endpoint

➡️Defender for Identity

➡️Defender for Cloud Apps

➡️Defender for Office 365

➡️Microsoft Defender Vulnerability Management

➡️Secure score

PIM for Groups paired with M365 Defender RBAC offers a solution for just-in-time Defender access.

Find out more details: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/configure-just-in-time-access-to-m365-defender/ba-p/3764564

#azure #azuread #entraid #identity #rbac #m365defender #xdr #justintime #pim #pam #mde #mdo #mdi #securescore #mdca #casb #microsoft #microsoftsecurity #soc #cloud #cloudsecurity #cloudnative

Microsoft Defender for Office 365 has been recognized as a leader in The Forrester Wave ™: Enterprise Email Security, Q2 2023 report.

For more information on this recognition, check out the full report here: https://reprints2.forrester.com/#/assets/2/108/RES178496/report

https://www.microsoft.com/en-us/security/blog/2023/06/12/forrester-names-microsoft-a-leader-in-the-2023-enterprise-email-security-wave/

#microsoft #office365 #security #leader #email #xdr #defender #microsoft365defender #mdo #emailprotection #emailsecurity #phishing #spam #SecOps #soc #analyst #bec #sandboxing #emailauthentication #collaboration #siem #ir #threatintelligence #azure #cloud #cloudsecurity #cloudnative

I suggest to have a look at "Email Protection Basics" blog series:

1. Bulk Email: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-bulk-email/ba-p/3445337

2. Spam & Phish: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-spam-amp-phish/ba-p/3555712

3. Spoof and Impersonation: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-spoof-and-impersonation/ba-p/3562938

4. Anti-malware, Safe Attachments, and Quarantine: https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-anti-malware-safe/ba-p/3791516

#mdo #emailsecurity #email #collaboration #spoofing #impersonation #malware #attachments #safeattachments #xdr #microsoft #microsoftsecurity #microsoft365 #exchangeonline #spam #bulkemail #quarantine #office365 #azure #cloud #cloudsecurity #soc #analyst

De la dissuasion à la terreur - CQFD

Insultes et humiliations, arrestations arbitraires, violences gratuites, agressions sexuelles, tabassages de personnes maintenues au sol… Depuis le passage en force de la réforme des retraites, la répression policière est en roue libre. Décryptage et analyse juridique avec l’Observatoire parisien des libertés publiques.

https://cqfd-journal.org/De-la-dissuasion-a-la-terreur

#mdo #violencepolicieres #france
#ObservatoireParisienDesLibertés

Pierre Bernat (@BernatPierre): "Quiconque est venu à #SainteSoline ce week-end est revenu forcément choqué. J'ai pris le temps pour revenir sur ce qu'il s'est passé, de mon point de vue d'observateur des pratiques policières. #NoBassaran #BassinesNonMerci #Thread 🔽" | nitter
https://nitter.net/BernatPierre/status/1640546385102602243#m

#mdo #violencepolicières