#trustedsec — Public Fediverse posts

Oh, look! Microsoft Azure's sign-in logs are being bypassed again...for the third and fourth time. 🎉👏 Congrats, #TrustedSec, for finding yet another way to make security sound like a game of whack-a-mole! 🐱‍👤 #SecurityTheater
https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found #MicrosoftAzure #SecurityBypass #WhackAMole #InfoSec #HackerNews #ngated

Oh, look! Microsoft Azure's sign-in logs are being bypassed again...for the third and fourth time. 🎉👏 Congrats, #TrustedSec, for finding yet another way to make security sound like a game of whack-a-mole! 🐱‍👤 #SecurityTheater
https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found #MicrosoftAzure #SecurityBypass #WhackAMole #InfoSec #HackerNews #ngated

Oh, look! Microsoft Azure's sign-in logs are being bypassed again...for the third and fourth time. 🎉👏 Congrats, #TrustedSec, for finding yet another way to make security sound like a game of whack-a-mole! 🐱‍👤 #SecurityTheater
https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found #MicrosoftAzure #SecurityBypass #WhackAMole #InfoSec #HackerNews #ngated

Oh, look! Microsoft Azure's sign-in logs are being bypassed again...for the third and fourth time. 🎉👏 Congrats, #TrustedSec, for finding yet another way to make security sound like a game of whack-a-mole! 🐱‍👤 #SecurityTheater
https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found #MicrosoftAzure #SecurityBypass #WhackAMole #InfoSec #HackerNews #ngated

Oh, look! Microsoft Azure's sign-in logs are being bypassed again...for the third and fourth time. 🎉👏 Congrats, #TrustedSec, for finding yet another way to make security sound like a game of whack-a-mole! 🐱‍👤 #SecurityTheater
https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found #MicrosoftAzure #SecurityBypass #WhackAMole #InfoSec #HackerNews #ngated

Review: Metasploit, 2nd Edition https://www.helpnetsecurity.com/2025/06/02/review-metasploit-2nd-edition/ #BinaryDefense #Metasploit #TrustedSec #Don'tmiss #Reviews #OffSec #Rapid7 #review #News #book

Review: Metasploit, 2nd Edition https://www.helpnetsecurity.com/2025/06/02/review-metasploit-2nd-edition/ #BinaryDefense #Metasploit #TrustedSec #Don'tmiss #Reviews #OffSec #Rapid7 #review #News #book

Review: Metasploit, 2nd Edition https://www.helpnetsecurity.com/2025/06/02/review-metasploit-2nd-edition/ #BinaryDefense #Metasploit #TrustedSec #Don'tmiss #Reviews #OffSec #Rapid7 #review #News #book

Review: Metasploit, 2nd Edition https://www.helpnetsecurity.com/2025/06/02/review-metasploit-2nd-edition/ #BinaryDefense #Metasploit #TrustedSec #Don'tmiss #Reviews #OffSec #Rapid7 #review #News #book

Sounds like exciting news for both sides #TrustedSec #Trimarc ... https://trustedsec.com/about-us/news/trimarc-joins-forces-with-trustedsec-to-strengthen-security-advisory-services

@deliverance enterprise is a whole other ball of wax - for good role model there - probably dave kennedy - he started small infosec ventures (2 at once) and has grown tremendously - i think those guys most do rfq/rfp and bids but they probably make 120k just for jr positions - that is probably not far off #trustedsec #binary defense

@deliverance enterprise is a whole other ball of wax - for good role model there - probably dave kennedy - he started small infosec ventures (2 at once) and has grown tremendously - i think those guys most do rfq/rfp and bids but they probably make 120k just for jr positions - that is probably not far off #trustedsec #binary defense

@deliverance enterprise is a whole other ball of wax - for good role model there - probably dave kennedy - he started small infosec ventures (2 at once) and has grown tremendously - i think those guys most do rfq/rfp and bids but they probably make 120k just for jr positions - that is probably not far off #trustedsec #binary defense

What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
#Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
#Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
#Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
#Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
#Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

@Xavier @jerry you have a veritable ycombinator of choices - networking is important for sure #resume refresh #binary defense #trustedsec #ee

@Xavier @jerry you have a veritable ycombinator of choices - networking is important for sure #resume refresh #binary defense #trustedsec #ee

@Xavier @jerry you have a veritable ycombinator of choices - networking is important for sure #resume refresh #binary defense #trustedsec #ee

@Xavier @jerry you have a veritable ycombinator of choices - networking is important for sure #resume refresh #binary defense #trustedsec #ee

Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation https://www.helpnetsecurity.com/2024/04/17/cve-2024-3400-attacks/ #PaloAltoNetworks #securityupdate #vulnerability #enterprise #TrustedSec #Don'tmiss #GreyNoise #WatchTowr #Hotstuff #firewall #Volexity #exploit #News #PoC

Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation https://www.helpnetsecurity.com/2024/04/17/cve-2024-3400-attacks/ #PaloAltoNetworks #securityupdate #vulnerability #enterprise #TrustedSec #Don'tmiss #GreyNoise #WatchTowr #Hotstuff #firewall #Volexity #exploit #News #PoC

Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation https://www.helpnetsecurity.com/2024/04/17/cve-2024-3400-attacks/ #PaloAltoNetworks #securityupdate #vulnerability #enterprise #TrustedSec #Don'tmiss #GreyNoise #WatchTowr #Hotstuff #firewall #Volexity #exploit #News #PoC

Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation https://www.helpnetsecurity.com/2024/04/17/cve-2024-3400-attacks/ #PaloAltoNetworks #securityupdate #vulnerability #enterprise #TrustedSec #Don'tmiss #GreyNoise #WatchTowr #Hotstuff #firewall #Volexity #exploit #News #PoC

BloodHood Unleashed https://ciso2ciso.com/bloodhood-unleashed/ #0-CT-SOC-CSIRTOperations-CyberIncidents&AttacksNotepad #CISO2CISONotepadSeries #TrustedSec

BloodHood Unleashed https://ciso2ciso.com/bloodhood-unleashed/ #0-CT-SOC-CSIRTOperations-CyberIncidents&AttacksNotepad #CISO2CISONotepadSeries #TrustedSec

Really liked this post by Roza Maille at Trustedsec about how one could get into Detection Engineering. Especially liked the idea of focussing on core knowledge areas rather than specific things like Yara.

Also very useful with plenty of links to relevant resources for getting deeper into it all.

https://www.trustedsec.com/blog/on-the-road-to-detection-engineering/

[ #DetectionEngineering #TrustedSec ]

Really liked this post by Roza Maille at Trustedsec about how one could get into Detection Engineering. Especially liked the idea of focussing on core knowledge areas rather than specific things like Yara.

Also very useful with plenty of links to relevant resources for getting deeper into it all.

https://www.trustedsec.com/blog/on-the-road-to-detection-engineering/

[ #DetectionEngineering #TrustedSec ]

Really liked this post by Roza Maille at Trustedsec about how one could get into Detection Engineering. Especially liked the idea of focussing on core knowledge areas rather than specific things like Yara.

Also very useful with plenty of links to relevant resources for getting deeper into it all.

https://www.trustedsec.com/blog/on-the-road-to-detection-engineering/

[ #DetectionEngineering #TrustedSec ]

Really liked this post by Roza Maille at Trustedsec about how one could get into Detection Engineering. Especially liked the idea of focussing on core knowledge areas rather than specific things like Yara.

Also very useful with plenty of links to relevant resources for getting deeper into it all.

https://www.trustedsec.com/blog/on-the-road-to-detection-engineering/

[ #DetectionEngineering #TrustedSec ]

📬 Makros sind out: OneNote ist Microsofts neues Malware-Taxi
#Malware #Makros #Microsoftoffice #OneNote #OneNoteMalware #PhishingAngriff #PowerShell #Proofpoint #TrustedSec #VBScript https://tarnkappe.info/artikel/malware/makros-sind-out-onenote-ist-microsofts-neues-malware-taxi-264760.html

📬 Makros sind out: OneNote ist Microsofts neues Malware-Taxi
#Malware #Makros #Microsoftoffice #OneNote #OneNoteMalware #PhishingAngriff #PowerShell #Proofpoint #TrustedSec #VBScript https://tarnkappe.info/artikel/malware/makros-sind-out-onenote-ist-microsofts-neues-malware-taxi-264760.html

📬 Makros sind out: OneNote ist Microsofts neues Malware-Taxi
#Malware #Makros #Microsoftoffice #OneNote #OneNoteMalware #PhishingAngriff #PowerShell #Proofpoint #TrustedSec #VBScript https://tarnkappe.info/artikel/malware/makros-sind-out-onenote-ist-microsofts-neues-malware-taxi-264760.html

📬 Makros sind out: OneNote ist Microsofts neues Malware-Taxi
#Malware #Makros #Microsoftoffice #OneNote #OneNoteMalware #PhishingAngriff #PowerShell #Proofpoint #TrustedSec #VBScript https://tarnkappe.info/artikel/malware/makros-sind-out-onenote-ist-microsofts-neues-malware-taxi-264760.html

📬 Makros sind out: OneNote ist Microsofts neues Malware-Taxi
#Malware #Makros #Microsoftoffice #OneNote #OneNoteMalware #PhishingAngriff #PowerShell #Proofpoint #TrustedSec #VBScript https://tarnkappe.info/artikel/malware/makros-sind-out-onenote-ist-microsofts-neues-malware-taxi-264760.html

#TrustedSec because I forgot about that part (sorry)

#TrustedSec because I forgot about that part (sorry)

RT @[email protected]

We have open sourced our legal documentation used for physical penetration tests.

The purpose is to help the community and organizations protect their employees when conducting testing.

Includes three docs:

MSA
SOW
Authorization Letter

https://github.com/trustedsec/physical-docs

#TrustedSec

RT @[email protected]

PenTesters Framework (PTF) v2.3.4 released.

Defaults to python3 for PTF and TrevorC2.

http://GitHub.com/TrustedSec/PTF

#TrustedSec