ProSec @Cysmonk

IT and Cyber enthusiast Joined July 2021

Tweets

740
Followers

52
Following

815
Likes

3K

mRr3b00t @UK_Daniel_Card

19 hours ago

Some good tools for doing DNS enumeration: crt.sh explore.silentpush.com domaintools.com securitytrails.com projectdiscovery.io

7 64 363 13K 337

Download Gif

🔎 OSINT Toolkit – Essential Open Source Intelligence Tools 🕵️‍♂️ Open-Source Intelligence (OSINT) focuses on collecting and analyzing publicly available data from the internet. It’s a critical skillset for cybersecurity professionals, investigators, journalists, and researchers.

2 108 419 24K 536

Download Image

mRr3b00t @UK_Daniel_Card

a week ago

I wrote pages and pages and pages and pages on iPhone security config stuff..... I found that mostly to do EVERYTHING is possible with a willing person but most people do not care that much... Key: X = Mandatory O = Optional A key thing here is this is for PERSONAL devices not…

11 39 265 30K 285

Download Image

BlackRoomSec @blackroomsec

3 weeks ago

Next month is cyber security awareness month but I'm starting early. If you are not in a role which exposes you to the next best thing and current modern best practices to keep current, sign up for vendor webinars for the products that you wish you could use but can't for…

8 17 91 5K 73

Luiza Jarovsky, PhD @LuizaJarovsky

3 weeks ago

🚨 The 470-page report "Regulating under Uncertainty: Governance Options for Generative AI" by Florence G'Sell remains one of the most comprehensive AI governance resources to date. [Download it below!]. Quotes: "Governance of generative AI, therefore, requires policymakers to…

5 61 175 8K 167

Download Image

Luiza Jarovsky, PhD @LuizaJarovsky

4 weeks ago

🚨 WONDERFUL! The open-access book "AI and Fundamental Rights," written by a selection of all-star authors, is now available for download (link below)

7 106 307 17K 239

Download Image

spencer @techspence

a month ago

Let’s make Active Directory security education available to all! List your favorite Active Directory security resources. Plz share for reach!

34 103 779 77K 962

Sandy Zeng 🌻［MVP］ @sandy_tsang

a month ago

Finally my Intune Diff tool is ready 🥳. If you want to compare one Securely Baseline to multiple Intune policies, to see if you missed some settings or misconfigured something, this tool will help you that. #msintune intunediff.com

9 90 360 33K 327

Download Image

The Hacker News @TheHackersNews

a month ago

⚠️ A single click on a fake site can hijack your password manager. Researchers found 11 popular extensions (1Password, LastPass, iCloud & more) vulnerable—putting logins, 2FA codes, and credit cards at risk. 6 vendors still haven’t patched. Protect your PASSWORDS ↓…

37 368 973 112K 524

Download Image

Aurimas Griciūnas @Aurimas_Gr

2 months ago

You must know these 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗦𝘆𝘀𝘁𝗲𝗺 𝗪𝗼𝗿𝗸𝗳𝗹𝗼𝘄 𝗣𝗮𝘁𝘁𝗲𝗿𝗻𝘀 as an 𝗔𝗜 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿. If you are building Agentic Systems in an Enterprise setting you will soon discover that the simplest workflow patterns work the best and bring the most business value.…

7 148 672 49K 973

Download Image

Tony Redmond @12Knocksinna

2 months ago

.@Office365 Heads-up. If you have #Office365 E5 or #Microsoft365 licenses and use Microsoft Defender for Office 365, shared mailboxes must be licensed, and all user mailboxes need MDO licenses. The service description is clear, but who reads these things? office365itpros.com/2025/08/11/mic…

11 34 189 32K 193

Michael Bargury @mbrg0

2 months ago

we hijacked microsoft's copilot studio agents and got them to spill out their private knowledge, reveal their tools and let us use them to dump full crm records these are autonomous agents.. no human in the loop #DEFCON #BHUSA @tamirishaysh

105 899 9K 1.2M 7K

Download Image

Tomer Nahum @TomerNahum1

2 months ago

Today, together with Jonathan Elkabas, we're releasing EntraGoat - A Deliberately Vulnerable Entra ID Environment. Your own hands-on Entra lab for identity attack simulation. Built for red teams, blue teams and identity nerds. Check it out here👉github.com/semperis/entra…

9 236 697 40K 535

Download Image

Nathan McNulty @NathanMcNulty

2 months ago

If you use CIS Benchmarks, I highly advise against this recommendation... This disables cloud delivered protection which underpins a bunch of capabilities, disables roughly half of your protection Fortunately, if you enable Tamper Protection, it is forcefully enabled for you :)

11 32 184 24K 143

Download Image

Sean Metcalf @PyroTek3

2 months ago

If you have Active Directory Certificate Services (ADCS) in your environment, run Locksmith now! In Active Directory Security Assessments, we have found critical security issues in *most* ADCS configurations. The great thing about Locksmith is that it doesn't just highlight the…

8 228 876 57K 858

Download Image

Matt Zorich @reprise_99

2 months ago

DFIR resource worth book marking, the cheat sheets from @13CubedDFIR are a resource I constantly go back to, covering event logs, registry, browser artifacts and more. My favourite is definitely the RDP cheat sheet, which I have downloaded roughly 3500 times in the last few…

0 40 218 14K 207

Download Image

Ewelina Paczkowska (Welka's World) @WelkasWorld

2 months ago

⏰Legacy MFA & SSPR settings are retiring Sept 30, 2025. Ready to migrate? Here’s how to move MFA & SSPR settings to the Authentication Methods policy - step by step 🔗 welkasworld.com/post/legacy-mf… #MFA #SSPR #EntraID #AuthenticationMigration

1 8 46 3K 55

TRÄW🤟 @thatstraw

2 months ago

SPF protocol explained:

4 103 600 47K 506

Download Image

TRÄW🤟 @thatstraw

2 months ago

DMARC Protocol explained

5 182 912 82K 980

Download Image

Horizon Secured @horizon_secured

2 months ago

🔒Secure Bits💡 Want to protect your privileged accounts from Pass the Hash attacks? With 𝗥𝗗𝗣 𝗥𝗲𝘀𝘁𝗿𝗶𝗰𝘁𝗲𝗱 𝗔𝗱𝗺𝗶𝗻 𝗠𝗼𝗱𝗲, you can limit credential caching from Remote Desktop Protocol on the remote device. This feature uses the already logged-on account from the…