This is a personal blog and all content herein is my personal opinion and not that of my employer. Introduction After I shared the last post on Security Amnesia, a friend replied with a story that hit home: “When I was younger, me and my sister typed up CAA exam papers for commercial pilots …

This is a personal blog and all content herein is my personal opinion and not that of my employer. Introduction We spend millions securing systems and training people – and yet we still fall for the same attacks. Phishing, reusing passwords, skipping MFA. Why? This post isn’t about flaws in …

Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Introduction This post details a security weakness in Microsoft Intune’s Conditional Access (CA) filtering, which allows attackers with local admin privileges to …

This is a personal blog and all content herein is my personal opinion and not that of my employer. Introduction I recently had the privilege of attending the OFFENSIVE ENTRA ID AND HYBRID AD SECURITY workshop run by the brilliant Dirk-jan Mollema - author of offensive security tools ROADtools, …

Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Introduction In this post, I’m going to talk about an issue I spotted recently within Microsoft Azure. In my last post I talked about the VaultRecon issue that I …

Hero Image generated by ChatGPT This is a personal blog and all content therein is my personal opinion and not that of my employer. Introduction In this post, I’m going to talk about an issue I spotted recently within Microsoft Azure. Before I do though, let me set the scene a little… What …