All posts by John Doe

■■■■■ One Token to rule them all – obtaining Global Admin in every Entra ID tenant via Actor tokens. https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

■■■□□ After one proper YubiKey login to LastPass, restarting the browser does not validate the YubiKey further & will let you login with the first 12 characters of it. https://x.com/RandomDhiraj/status/1968910525749674158

■□□□□  The Great Firewall Leaks: A 600GB Trove of Secrets Exposed The Great Firewall Leaks: A 600GB Trove of Secrets Exposed

■■■■□ Firefox DNS privacy: Faster than ever, now on Android. Firefox DNS privacy: Faster than ever, now on Android

⚽️ APT28 embed payloads inside PNG files. https://blog.sekoia.io/apt28-operation-phantom-net-voxel/

■□□□□ Founder of One of World’s Largest Hacker Forums Resentenced to Three Years in Prison. https://www.justice.gov/opa/pr/founder-one-worlds-largest-hacker-forums-resentenced-three-years-prison

■■□□□ 5 Top Rated Flipper Zero Accessories You Can Buy On Amazon. https://www.bgr.com/1963571/top-rated-flipper-zero-accessories-amazon/

■□□□□ New Red Teaming Tool “Red AI Range” Discovers, Analyzes, and Mitigates AI Vulnerabilities. New Red Teaming Tool “Red AI Range” Discovers, Analyzes, and Mitigates AI Vulnerabilities

■■■■□ Google Drive Desktop for Windows Vulnerability Grants Full Access to Another User’s Drive. Google Drive Desktop for Windows Vulnerability Grants Full Access to Another User’s Drive

■■■■□ FortiDDoS OS Command Injection Vulnerability Let Attackers Execute Unauthorized Commands. FortiDDoS OS Command Injection Vulnerability Let Attackers Execute Unauthorized Commands