Microsoft told all security partners two years ago that there should be no new ADFS deployments and we should be moving customers to Azure AD. It’s suprising that this article lacks similar guidance: dump ADFS! Transition to AAD + PHS or AAD + PTA. It’s a single powershell cmdlet
We discovered an issue with ADFS which allows brute-forcing all domain accounts from the external network, while bypassing the extranet lockout policy. This can easily lead to account compromise / massive accounts lockout. @YaronZi @eyal_karnihttps://blog.preempt.com/security-advisory-targeting-ad-fs-with-external-brute-force-attacks …
-
-
-
1/2 Just a year ago MS published that ADFS is the #1 federation provider to login to Office 365 (https://techcommunity.microsoft.com/t5/Microsoft-Ignite-Content-2018/What-s-new-in-Active-Directory-Federation-Services-AD-FS-in/td-p/209767 …), and new ADFS features focus on securing extranet access..
Kraj razgovora
Novi razgovor -
-
-
Marina maybe you can help me with the query in my last tweet?https://twitter.com/xxByte/status/1149340458633584640 …
-
Hi, as I've already mentioned to someone else - since a lot of organizations might not be patched yet, we prefer not to release the tool. However, you can get those functionalities building on impacket, the blog explains how you can do it
Kraj razgovora
Novi razgovor -
-
-
Whoa ! Reverse-kerberoasting technique
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Nice work. I love the reverse-kerberoasting trick - very clever!
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
A real problem! Update released now.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
Tweet je nedostupan.
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.