Another day of Cybersecurity
On my way to another vulnerability (which was submitted to MSRC), I found vast misconfigurations and abuses in Azure IMDS.
What do you call a scenario where nothing is broken, yet everything is exposed? A bug, an abuse, or a … Read the rest
Think of Entra Agent ID like a passport for an AI worker. The agent can move between systems, call tools, and act on behalf of users, but it should never travel without a clear identity, a defined route, and a … Read the rest
When you hunt for vulnerabilities long enough, you keep tripping over abuses hiding in plain sight. Some have been quietly farmed for years while others spill out of fresh features and rushed integrations. This piece lives in that messy middle, … Read the rest
We’re in 2026, and inbox persistence is still here, and it’s one of the core pillars of the Microsoft 365 attack playbook. Once an attacker lands in a mailbox, they don’t rush to chase noisy privilege escalation. They go for … Read the rest
Exchange Online’s split architecture creates blind spots that BEC operators have been quietly exploiting. This post walks through four distinct techniques for creating inbox rules that evade standard detection surfaces, then examines the evasion combinations that leave most SIEM stacks … Read the rest
Harvest Now, Decrypt Later, or Decrypt Later, Damage Forever… Attackers are already collecting data.
If you work in security long enough, you eventually realize that most “future threats” are simply today’s threats with better marketing. Quantum computing is a perfect … Read the rest
Web browsers quietly handle credentials, tokens, and sensitive data for every tab we open, turning the browser into a critical security boundary. When that trust line cracks, even slightly, the impact can reach far beyond a single session or machine. … Read the rest
I love middleware, if it’s on Cloud Vendor, AI components, etc. This time is the AI Desktop Middleware.
As you remember, in the old days, AI was merely a guest in a browser, maybe locked securely within a browser sandbox … Read the rest
