Hi, yesterday, Microsoft has released a patch for a vulnerability in the SMBv31.1 (CERTFR-2020-ALE-008 / CVE-2020-0796) protocol that accidentally leaked online earlier this week during the March 2020 Patch Tuesday preamble. Updates a Microsoft Server Message Block 3.1.1 protocol issue that provides shared access to files and printers. The KB KB455176 is an update for …
Category: Microsoft
Mar 12
Office 365 MitM attack and Varonis protection
Last week, I had the opportunity to participate in a live session in French as official Speaker Varonis about Security, Data Protection & Governance as Varonis Elite member at SECURE IT DAY 2020 with Pierre-Antoine FAILLY (Security Architect – Varonis). We are seeing an uptick in adversaries using a very tricky Man-in-the-Middle (MitM) attack to …
Feb 29
Hardening settings for Domain Controllers
Hi! Basically, default settings of Domain Controllers are not hardened. Every DC has by default the “Default Domain Controllers Policy” in place, but this GPO creates different escalation paths to Domain Admin if you have any members in Backup Operators or Server Operators for example. They can become Domain Admin. Start with replacing the “Default …
Jul 18
Organizations need Data Protection for Microsoft Office 365
Hi, there is a common misconception that SaaS data in the cloud is inherently safe. Public cloud providers like Microsoft have the responsibility to ensure that their customers’ data is protected against infrastructure-related interruptions, but it is your customers’ responsibility to protect that data from accidental deletions and insider threats and to comply with various …
Jul 17
1st aOS Day in Monaco!
Hi, I will be speaking at aOS Monaco this September on Microsoft 365 Data Protection with Jeff Angama. It’s an honor to be an #aOS Speaker. Thank you so much for acknowledging me and I am happy to be a part of aOS Community. Discover modern experiences you can build with Microsoft Azure and Office365 …
Follow me
