Mark @IntNull0

Dad, InfoSec nerd, US Army veteran Tampa Joined February 2011

Tweets

3K
Followers

265
Following

1K
Likes

1K

YungBinary @YungBinary

a day ago

Malware sandbox bypass and Windows Defender exclusion PoC! I made it after discovering a simple yet effective technique being used by a loader in the wild dropping what we are calling #NightshadeC2 (blog coming soon!) PoC -> github.com/eSentire/iocs/… youtube.com/watch?v=_0-IMM…

1 46 139 14K 74

JS0N Haddix @Jhaddix

8 hours ago

New Executive Offense Newsletter - Building AI Hackbots, Hard-Earned Lessons Pt 1 (and course giveaway) executiveoffense.beehiiv.com/p/ai-hackbots-… Giveaway: Retweet this post and be entered to win a seat in Q4s courses! ("Red Blue Purple AI" or "Attacking AI") Three winners will be chosen next…

14 93 138 6K 73

ALI TAJRAN @alitajran

12 hours ago

Remove the Outlook Report Button if you use a third-party phishing tool! Many organizations use a third-party phishing tool to help users quickly report suspicious emails in Outlook. This is excellent to keep the IT team informed and ahead of potential threats. However, if both…

1 6 71 5K 82

Download Image

Speaker 25 @rodtrent

2 days ago

Custom detection rules get a boost—explore what’s new in Microsoft Defender techcommunity.microsoft.com/blog/microsoft… #MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

1 11 32 2K 26

John Savill @NTFAQGuy

2 days ago

Microsoft have released a great (free) Zero Trust Workshop that helps organizations with an actionable roadmap to achieving zero trust in their organization. youtu.be/xVWr1ml47_g aka.ms/ztworkshop 00:00 - Introduction 00:07 - Zero Trust 101 00:22 - NIST zero trust…

4 86 431 36K 699

Sami Laiho @samilaiho

3 days ago

Planning for mandatory multifactor authentication for Azure and other admin portals learn.microsoft.com/en-us/entra/id…

1 11 40 2K 15

Simon Skotheimsvik | MVP @SSkotheimsvik

4 days ago

💡 Intune admins: Autopilot devices can silently fail compliance due to the “Enrolled User Exists” policy. If IT enrolls instead of the user, CA policy may block. I break it down + how to detect it with PowerShell in my latest blog. skotheimsvik.no/the-hidden-int… #Intune #Autopilot

1 22 42 4K 39

Merill Fernando @merill

5 days ago

💥 Most people don’t know this: When you log into Microsoft 365, you’re touching one of the most advanced identity systems on Earth. Here’s how Entra works behind the scenes: 🌍 Sub-ms global login latency 🛡️ Secured with conditional access policies 📦 50 million users per…

3 40 221 22K 228

Download Video

Speaker 25 @rodtrent

3 days ago

Visualizing KQL: Turning Queries into Stunning Dashboards rodtrent.substack.com/p/visualizing-… #MustLearnKQL #KQL #KQLMysteries

0 14 64 4K 68

Download Image

Ewelina Paczkowska (Welka's World) @WelkasWorld

3 days ago

🔐 New blog post is live! Conditional Access Essentials: Authentication Contexts + Secure PIM & Resource Access Stop attackers from bypassing MFA. Secure SharePoint. Protect privileged accounts. 🔗 welkasworld.com/post/condition… #ConditionalAccess #MicrosoftEntra #CloudSecurity

4 19 87 9K 95

@rnabmitra @rnabmitra

3 days ago

#MSIntune #Roadmap Update Ability to choose which CU /Non-Security/OOB updates you want to Approve along with Rollout Options microsoft.com/en-us/microsof…

2 13 40 4K 21

Download Image

Speaker 25 @rodtrent

3 days ago

Cloud forensics: Why enabling Microsoft Azure Storage Account logs matters techcommunity.microsoft.com/blog/microsoft… #MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

6 18 56 4K 54

Cyber_OSINT @Cyber_O51NT

3 days ago

The Google Salesforce breach, linked to the UNC6040 group, leveraged vishing and OAuth abuse, exposing sensitive business data and highlighting critical vulnerabilities in SaaS security practices. #Cybersecurity #DataBreach ift.tt/u6c1a2B

1 12 26 2K 4

Wiz @wiz_io

a week ago

Thousands of MCP servers are already live, but most security teams don’t have a clear strategy yet. Get this guide and learn: - Key risks with local and remote MCP servers - Real-world threats like prompt injection and supply chain compromise - Steps for safely using MCP tools

0 3 3 15K 4

Wiz @wiz_io

a week ago

Worried about privilege escalation in your EKS clusters? Get this detailed IR playbook template to learn: - How privilege escalation occurs in EKS - Detection methods and investigation techniques - Containment and remediation strategies - Best practices for proactive defense

0 1 0 15K 2

Steven Lim @0x534c

6 days ago

Sentinel Threat Intelligence Nation-State Detection detections.ai/share/rule/5nk… #cybersecurity #sentinel #threatintelligence

9 27 151 13K 97

Download Image

Jason Lang @curi0usJack

5 days ago

A huge list of interesting Azure Sentinel hunting queries to give you some inspiration for your next purple team. github.com/Azure/Azure-Se…

2 38 167 15K 179

Nathan McNulty @NathanMcNulty

a week ago

If you use Sentinel, this one is for you :) This uses a NRT rule to detect Conditional Access changes and ensures an emergency access group is excluded from the policy 😎 Working on blog posts now, rough directions and NRT rule setup in the repo github.com/nathanmcnulty/…

Nathan McNulty @NathanMcNulty

3 weeks ago

1 12 85 27K 83

Download Image

3 36 126 14K 110

Download Image

Imran Rashid ☁️ @ITSupportBlog

7 days ago

🚨 Exciting News The NEW Microsoft Purview Information Protection & Data Loss Prevention Ninja Training is Live! And it’s FREE! Earn a badge when you complete the ninja training. Ready to become a Ninja? Check it out at aka.ms/MIPNinja Enjoy and don’t forget to…

5 59 255 15K 321

Download Image

ALI TAJRAN @alitajran

a week ago

On September 30, 2025, Microsoft will deprecate the legacy multifactor authentication (MFA) and self-service password reset (SSPR) policies in Microsoft 365. To avoid any service impact, you must migrate these old MFA and SSPR policies to the new converged (unified)…