If you don't have the professional experience, build it yourself. For the past year I've been using Microsoft Entra ID to manage all objects within my (fictitious) healthcare startup, OSHA, including user accounts, group accounts, devices and applications. OSHA operates across m…
“We use passkeys, so phishing can't get us.” I wouldn't be so confident. Passkeys are a major improvement in authentication security. But attackers are adapting around the technology rather than simply attacking the cryptography. Microsoft has documented active campaigns where a…
What if the person asking you to “fix your computer” is actually trying to compromise the entire company? This isn't science fiction. Microsoft has reported attacks where threat actors impersonate IT support through Microsoft Teams, convincing targets to interact with them and u…
The cybersecurity arms race just got an upgrade: AI is now helping both sides move faster. Defenders are using AI to analyze telemetry, hunt threats and discover vulnerabilities. Attackers are increasingly using AI to accelerate reconnaissance, vulnerability exploitation and oth…
Schomer — Principal Security Solutions Architect & Founder
1,411 Vulnerabilities: Is Patch Tuesday Scalable Anymore? Microsoft just dropped its largest security update to date—1,411 vulnerabilities in a single cycle, including 70 rated Critical and an active Windows Shell zero-day (CVE-2026-96951) bypassing Mark of the Web (MotW) protec…
Microsoft Record October Patch Tuesday Fixes 1,400+ Flaws Including Zero-Day Under Active Attack That headline suggests that Microsoft's October Patch Tuesday release addressed a very large number of security vulnerabilities, with at least one zero-day vulnerability being active…
I asked for a sales report. Why does the AI agent have access to payroll? I can see a reason for the agent to read CRM records and the relevant contracts. I can’t see a reason for it to browse payroll, even though I happen to have access to both. This is the part of Proofpoint’s…
Has successfully verified Microsoft Applied Skills: Defend against cyberthreats with Microsoft Defender XDR (Microsoft) and Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) (Microsoft)
👋 Hello Cyberr.ai Community! I’m Yasir Mehmood, a cybersecurity professional, Microsoft Security Consultant, and Cybersecurity Instructor/Trainer focused on helping professionals and organizations strengthen their security capabilities. My core areas include: 🔐 Microsoft Entra…
Thierno Birahim Ndiaye — External Consultant – Information Systems Security
Has successfully verified Microsoft Certified: Azure Administrator Associate (AZ-104) (Microsoft) and Microsoft Certified: Azure Fundamentals (AZ-900) (Microsoft)
📰 Microsoft Defender flags legitimate Google search links as malicious https://www.bleepingcomputer.com/news/security/microsoft-defender-flags-legitimate-google-search-links-as-malicious/ via BleepingComputer · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.ai/news
ROBERT Malin — Looking for my first hands-on cyber role! Happy to be here!
Did anyone else get like 20 emails from notifications from like a month ago? Anyone hav any info? It's Sat and getting 20 notification emails just not normal.
🚀 We are growing our Security Team at CorVel! CorVel is a national leader in risk management solutions and a certified Great Place to Work®. We are looking for a dedicated Security Analyst to play a pivotal role in safeguarding our digital ecosystem. This is a 100% remote posit…
Hello everyone! ☺️ I’m excited to join this community! I’m a Cybersecurity Consultant from Spain with experience helping organizations strengthen their cybersecurity posture through governance, risk management, compliance, and security consulting. Throughout my career, I’ve work…
Has successfully verified Microsoft Certified: Information Protection & Compliance Administrator Associate (Microsoft), Microsoft Certified: Azure Security Engineer Associate (Microsoft) and 2 more certifications
Craig Hays — Head of Security Operations at Greencore Group PLC
What's the fastest way, from release to install, to automatically patch operating systems and third party software? Microsoft automatic updates for example are trickle fed from release, by default, where the fastest you can go across a large enterprise is maybe up to 24 hours. I…
Lee Fleming — IAM & GRC Consultant | Identity Governance, Access Control & Security Design
Four weeks ago a client terminated their MSP contract. Their independent security advisor, me, is still waiting for the handover. No Microsoft 365 admin access. No firewall credentials. No network documentation. No backup system access. Just silence. This is not unusual. It happ…
One thing I am always on the lookout for are resources for Cyber news. Currently using sites like bleepingcomputer, techcrunch, and ZDI Blog. I also subscribed to TLDR infosec however I find AI is consuming the news space for a lot of these. I do not care much for what is new in…