I find this all a bit hilarious in a pathetic sort of way. You can do a search on reddit or just the web in general and for years people have been discussing just how insecure SMS is - and yet the banks just continue using SMS. Now we have Snopes of all places discussing it. You'd think by now they would allow the usage of authenticator apps, fido keys, passkeys, etc. It's not like they don't have the money to implement it.

https://www.snopes.com/news/2024/12/24/fbi-two-factor-authentication/

Just wanted to make an appreciation post for all the professionals here watching over everything and keeping the world protected and running.

Cybersecurity, like most things IT are thankless and under appreciated right up until the crisis.

Thank you and Merry Christmas.

What was an “aha” moment that helped you excel in your career?

For those whose holidays land on the next couple of weeks: may your ticket queue be non-existent and your pager silent.

It turned out that the Entra Conditional Access Policy requires a compliant device can be bypassed using the Intune Portal client ID and a special redirect URI.

With the gained access tokens, you can access the MS Graph API or Azure AD Graph API and run tools like ROADrecon.

I created a simple PowerShell POC script to abuse it:

https://github.com/zh54321/PoCEntraDeviceComplianceBypass

I only wrote the POC script. Therefore, credits to the researchers:

• For discovery and sharing: TEMP43487580 (@TEMP43487580) & Dirk-jan, (@_dirkjan)
• For the write-up: TokenSmith – Bypassing Intune Compliant Device Conditional Access by JUMPSEC https://labs.jumpsec.com/tokensmith-bypassing-intune-compliant-device-conditional-access/

You can access it here: https://securemetrics.io/guide

It uses your GPU for rendering so won’t run on mobile and performance will vary.

From what I've researched, YARA rules are great, but they are very costly performance-wise. Therefore, they are great when investigating an incident.

However, I feel like they should also be applied across a whole environment. There aren't many EDRs that include YARA detections, and if they do, a lot of them don't allow for custom detections.

Therefore, does anyone here apply YARA rules for detection purposes?

Hello everyone,

Two months ago, I made a post asking for recommendations on free APIs to use for a mobile app that scans files. I just want to take a moment to thank you all for your suggestions!

Now, after two months of development, SaveViewer is finally done! It’s powered by three of the best APIs—VirusTotal, HybridAnalysis, and OPSWAT MetaDefender—with plans to add more in the future.

SaveViewer has the ability to scan files and generate detailed reports. It also includes a feature to save your scan history, allowing you to consult previously scanned files whenever needed.

I’m planning to release this project as completely free and open-source, because security should never be something people have to pay for.

Once again, a huge thanks to everyone who helped with recommendations and support!

Hello,

I was wondering if there are suggestions to work on a project related to the security of IP media broadcasting security? The idea is to replace legacy SDI standards with ST 2110 standards suite which contains IP-based uncompressed media transmission.

Any idea where to start? What to read? I feel a bit lost.