• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: July 20th, 2023

help-circle







  • Gear on the cheap?

    If you’re patient and can self-support, your local non-profits and their online stores may be useful.

    It’s rare to see big gear NIB, but it does happen; have seen rack mount Cyberpower, 10 outlet, hi-watt units, IOB going for around $200+ in the last 6 months. Picked up a previous generation, 5 disk NAS for a tenth of its retail price, used.

    You’re north of my border so my sites won’t work for you, but seriously, look into any Goodwill/Salvation Army type organizations, and don’t neglect local, they can be rewarding too.

    GL&HF!












  • The meat of the matter?

    “Microsoft had said that Outlook.com and Exchange Online were the only applications known to have been affected via the token forging technique, but Wiz Research has found that the compromised signing key was more powerful than it may have seemed, and was not limited to just those two services. Our researchers concluded that the compromised MSA key could have allowed the threat actor to forge access tokens for multiple types of Azure Active Directory applications, including every application that supports personal account authentication, such as SharePoint, Teams, OneDrive, customers’ applications that support the “login with Microsoft” functionality, and multi-tenant applications in certain conditions.

    In addition, while Microsoft mitigated this risk by revoking the impacted encryption key and publishing attacker IOCs, we discovered that it may be difficult for customers to detect the use of forged tokens against their applications due to lack of logs on crucial fields related to the token verification process.”