From now on any new domain I acquire is going straight to DNSSEC and SMTP Dane. So easy to do

I sort of miss the days of phone form factor innovation, now all phones look incredibly similar. We'll never see some of the whacky designs we had in the past again. Not that it matters for me as #GrapheneOS.

Quick post about the RedSun Exploit: www.linkedin.com/posts/jay-ke...

This image perfectly describes PIM self approval with no authentication context

The pick of destiny! @skotheimsvik.no

In case you missed it. App Control Manager now has an option to deploy a WDAC audit mode policy for RMM tools:

Happy Sunday!

MCP permissions seem to be missing in #Entra portal so I made a quick #KQL detection to detect when MCP permissions are added: github.com/jkerai1/KQL-...

MDA MDE MDI MDO But what is MDU?

With these type of scams becoming more popular www.ybs.co.uk/savings/guid... you should set a verification phrase with your family members to make it easier to spot scammers

Some new applied skills are out so ofc I had to go complete them to maintain my throne as Mr Applied skills See My video about applied skills here: www.linkedin.com/posts/micros...

I have no issues with the inclusion of the AI in products. My issue is throwing GenAI at problems that GenAI was clearly not meant to solve. If a better algorithm/solution exists, use that instead...

One thing I really like about RMAUs is that it forces people to use the correct roles.. PIM'ing to GA won't work for everything #Entra

You've heard of VibeCoding but have you heard of Software VibeCoded Networking?

Attackers don’t care about your roadmap slide They care if one weak control lets them inside #ButImNotARapper

Security copilot won't let you deploy Overage SCUs only...Unless you deploy 1 SCU first then turn it down to 0 after.

Nice try LinkedIn with the wrap but I'm not installing your app. If it can run in a browser.. Its staying in the browser

I can't wait for all these browsers to add AI honestly. Finally businesses will see the use case for a single properly managed browser and block the rest.

Top tip: Wear your battle jacket to conferences. Then you spend more time talking to sales people about bands than their fancy expensive dashboard 🤘

When you're scambaiting and chilling and you hit them with the "what do you think of *insert modern dictator here* ?"

Basically

www.linkedin.com/posts/jay-ke... unlike the first time i tried to upload a video to linkedin and epically failed, this one actually uploaded! woo 1 take!

> Being a long teams meeting just to say "nope, nothing from my end" right at the end 🖖

learn.microsoft.com/en-us/copilo... Security Copilot coming to E5 is massive news!

Are you autopatch or outta patch?

Its Friday my dudes

www.python.org/downloads/re... wow about time. Get uninstalling python for devs and repushing via Store! Given that going from Python 2.X to 3.X broke some things wonder how this will work 🤔

Okay wont lie, this is a nice beginner applied skill to teach end users the fundamentals of what Microsoft copilot can do #MSLearn #AppliedSkills learn.microsoft.com/en-us/creden...

the math ain't mathing... Looks like some new applied skills are available and some have been retired. At least this time they are staying on my transcript wooo!

Copilot coffee!

Math youtu.be/IL0NKa0EDZk

Inviting Guests in your tenant via Access Packages? Ensure you have a flow to clear up these guests. Ensure Billing is enabled for Identity Governance for Guests. #Entra

If you license your break glass for a mailbox for notifications do you also place information barrier/exchange transport rule/ hide from GAL for it? #entra

If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory. This is a cloud only Tenant!

Now file upload AI search is embedded right into google search you need to look at DPSM for AI and endpoint DLP asap #purview

well thats an interesting phish

Today i learned if you have a delete resource lock on an AVD host pool you can't force signout users!

Today's task: Push personal 2fa and banking apps to graphene OS private space and delete from personal space #GrapheneOS

Global Administrator's well known name is TenantAdmins if you ever see it in logs. This annoyed me when I first started in SOC and took me a while to figure out.

Heads up if you are blocking M365 Copilot in Defender for Cloud Apps, it will also block your admin planes due to .cloud.microsoft being included #Defender #MDA #MCAS

Thank you GrapheneOS for freeing up the mental space that is required when looking for a new phone

Wowzer hit 10k on LinkedIn I'm an influencer now Here's what I learnt about b2b sales.

Instructions unclear. Send help

Foiled by own custom MDA policy!

Free Open source AITM preventing browser extension from cyberdrain? Need to check this one out myself docs.check.tech #Entra

Over-provisioning of role assignable groups can be an IAM nightmare. Especially if combining with Restricted Management Admin Units. I suggest only using Role Assignable groups if you need to actually assign roles. If you need to lock the members or group itself use a RMAU. Thank me later. #Entra

Unreal to see this under my name! #MVPbuzz

I'm so glad I high rolled on the IT stat, I can't imagine being any other class #nerd

When the portal says you aren't licensed for a feature but you are. #Korn #Microsoft