Oh yeah, it's finally here! 😎😎👌 Can't wait to dig into it guys Karl @asegunlolu

Let's talk about tiered administration in AzureAD: - What it starts with - How it can be violated - What you can do about that In 10 tweets or less. Go:

Some big personal news: last year I decided to start my own company. Today I'm making it official and announcing Outsider Security (Outsider Security). My focus will be on Azure AD and Active Directory security, converting my research experience into in-depth tests and advice.

Breaking News: Microsoft agreed to buy the video game maker Activision Blizzard for $68.7 billion, its largest takeover ever and a big bet on the metaverse. nyti.ms/3GFQI5s

Delighted to announce I'll be presenting alongside ChrisPy at Blue Team Con in Chicago this August! We'll be presenting "SaaSy detection: purple teaming Software-as-a-Service platforms"; lessons learned uplifting detection capability in SaaS-heavy environments.

Happy Birthday, Chester. We miss you ❤️

thewitcher.ly/ANewSagaBegins

A new cross-account vulnerability in #Azure PostgresSQL DB service by Wiz research team allowed unauthorized read access to other customers’ Flexible PostgresSQL 🐘 Read more on #ExtraReplica - wiz.io/blog/wiz-resea…

“Microsoft Word? I haven’t heard that name in years…”

How to get into cloud security based on my own experiences, and on mentoring and hiring over the last few years. I've focused on how to make yourself a success in the field, rather than just the technical knowledge required: nojones.net/posts/breaking…

Ben Sean Metcalf SwiftOnSecurity Shameless plug on a paper Emilian Cebuc and myself worked on to try to help orgs implement some of the best practices in Azure in a way that can help orgs at various sizes and security maturity improve😁withsecure.com/en/expertise/r…

Awesome talk by the ones and only Nick Jones and Mohit G., about AWS IAM permissions and how to get a bit more clarity in the chaos they can create, with IAM-Spy. Definitely worth a watch on fwd:cloudsec's stream/videos! 😎🚀

Also, I cannot not recommend Darwin's Azure talk at #fwdcloudsec! Really important one for anyone working with Azure, as there's some pretty interesting things you can do with Resource Graph 👀👏

secwiki.cloud is our internal cloud knowledgebase, and this release is a culmination of work from 33 of our current staff and alumni going back to 2018. Some thoughts on the wiki, and why I pushed for us to release it:🧵

The Uber hack is quite severe and wide ranging. Wishing their blue teams the best of luck and love during this understandably difficult period. Some thoughts & observations based on what we've seen so far 👉 1/N

If the leaked screenshots are genuine, we're looking at a total compromise of Uber: * AWS admin access * G Suite admin access, with 1PB of data in use * Slack * Internal finances * VMware vSphere access * Etc

First 1.0 release of #azuread overview diagram #microsoft365 #msgraph showing different integrations, dependencies, and services within the Azure AD Ecosystem. Visio picture here --> bit.ly/3SBAXly

NEW VIDEO!: Life is full of surprises - AMD $5,000 Ultimate Tech Upgrade youtu.be/IL2P1IB-2nc Enter the giveaway for two AMD RX 7600 GPUs below! gleam.io/n153v/amd-rx-7… #sponsoredby AMD

Google Cloud accidentally deleted a company's entire cloud environment (Unisuper, an investment company, which manages $80B). The company had backups in another region, but GCP deleted those too. Luckily, they had yet more backups on another provider. theguardian.com/australia-news…