Francisco Tamayo

We're grateful for @CAgovernor's strong support of our mission and model, as expressed in his 2026-27 proposed budget. Our President and CEO Ajita Talwalker Menon underscores our imperative to serve adult learners in a dynamic labor market. Full statement: calbrig.ht/3LBTccM

Did you miss the SSC 101 Training? Watch the recording below to learn how you can participate in joint decision-making about important programs and services for student at your school site: youtube.com/watch?v=RS77zJ…

Leveled up my meme game for this one

Microsoft is Offering FREE Azure 2025 Certification Courses! No Fee, Completely Free These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes. Don't miss these courses if you want to make your career in 2025:

@SecurityTrybe Take a picture of course

One of your servers has gone offline and you walk in to find this. What are you doing first?

''iDRAC to Domain Admin'' #infosec #pentest #redteam #blueteam infosecwriteups.com/idrac-to-domai…

Promoting a Windows Server 2025 Member to Domain Controller requires WS 2016 domain functional level youtu.be/zNTNaPWH1XQ

Another story from our SOC. "A network connection event or file download seen on your network has been linked to an emerging threat activity group. The following file has triggered this alert:" C:\Users\username\Downloads\NanoPhanoTool.exe According to the analysis, the user downloaded this file 17 times (!), seemingly because it was blocked every time the download was completed. This is some persistence by the user :) NanoPhanoTool.exe is a LummaStealer, the sample is here on Malware Bazaar [1] Trendmicro wrote an interesting article about the abuse of GitHub as a trusted platform for delivering malware: While distinctions exist in the infection chain order and specific implementation details, several key components are consistent. Quote from [2] - Compromised websites: used to deploy malicious PHP scripts for validation and redirection. - GitHub repositories: used as a trusted platform to host and distribute payloads. - Redirect infrastructure: tailored redirection mechanisms are employed to direct victims to malicious content. [1] bazaar.abuse.ch/sample/cd207b8… [2] trendmicro.com/en_no/research…

After onboarding an employee into a new role, verify their identity before granting access to resources by using Verified ID with Access Packages. See it here. youtu.be/Ic6P1mEsYLI #FaceCheck #microsoftsecurity #azureactivedirectory #microsoftentraid #entra #microsoft

🐟

Customers are pleasantly surprised when Microsoft Defender XDR Automated Attack Disruption takes action, because it is on by default when an E5 license is assigned. Bonus: It can also disable accounts in AD if MDI is deployed. #automated-response-actions" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-us/defender…

A Guide to Azure Well-Architected Framework’s Security Pillar techcommunity.microsoft.com/blog/azureinfr…

Microsoft is Offering FREE Azure 2025 Certification Courses! No Fee, Completely Free These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes. Don't miss these courses if you want to make your career in 2025:

Entra ID now supports QR code authentication. 1️⃣ You print out an QR code 2️⃣ The user scan this instead of entering username and password manually 3️⃣ They enter a PIN 1/3 learn.microsoft.com/en-us/entra/id…

Microsoft is Offering FREE Azure 2025 Certification Courses! No Fee, Completely Free These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes. Don't miss these courses if you want to make your career in 2025:

Updated guidance on conditional access: Either target all resources with MFA or at least target Azure AD Graph through "Custom security attributes". #EntraID #CA #protecting-directory-information" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-us/entra/id…

There's a new beta Microsoft Certification with your name on it, security pros! 🤓 Explore how you can validate your information security skills beginning February 11: msft.it/6015UjttH

@rucam365 @Threatscape Event is full 😞

Upcoming: Mastering Conditional Access — 16 January w/ @Threatscape • Good, bad, and ugly of CA • Avoiding common mistakes • What CA does and doesn’t save you from (red team tools explored) • Anything else you’re specifically interested in? Let me know! REGISTER: threatscape.com/mastering-entr…

👀

''Local Administrator Protection | Privilege Protection'' #infosec #pentest #redteam #blueteam call4cloud.nl/local-administ…