Cybersecurity pro & red teamer | Practical lessons on #MSIntune, #MicrosoftDefender, Azure cloud security & threat hunting. Daily tips, configs & real incidents
Joined July 2025
- Tweets477
- Following1.1K
- Followers126
- Likes1.9K
Oday making script kiddies trillionaires
BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen:
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies
This is the largest hack in crypto history.
Unpopular opinion: Most password policies are security theater.
IT pros, where do you REALLY store passwords?
Password manager?
Memory?
OneNote?
Recycled passwords?
Still enforcing 60–90 day resets?
If your policy creates bad habits, is it security or just compliance?
Love using this baseline. Customers know the tool and it's not reinventing the wheel.
We released updated Microsoft 365 configuration baselines and ScubaGear v2.0.0, featuring direct REST API calls, automated Power BI coverage, and a new Security Suite baseline to streamline M365 security.🧑💻🔗 cisa.gov/resources-tools/ser…
ALT Image depicting an astronaut figure climbing a rope on the left against a blue digital background. The text on the right reads "SCuBA Microsoft 365 Secure Configuration Baselines Update Version 2.0" with the Cybersecurity and Infrastructure Security Agency (CISA) logo in the bottom right corner.
0day everyday at this rate
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
