On-Prem Misconfigurations Lead to Entra Tenant Compromise 

On-Prem Misconfigurations Lead to Entra Tenant Compromise 

As enterprises continue to transition on-premises infrastructure and information systems to the cloud, hybrid cloud systems have emerged as a vital solution, balancing the benefits of both environments to optimize performance, scalability, and ease of change on users and administrators. However, there can be risks involved when connecting a misconfigured ... Read More
The Elephant In the Room – NTLM Coercion and Understanding Its Impact

The Elephant In the Room – NTLM Coercion and Understanding Its Impact

| | attack paths, Blog
Since introducing NTLM coercion techniques such as PetitPotam into the NodeZero platform, we frequently have security practitioners request help understanding these techniques and what impact they have to their enterprise. […] The post The Elephant In the Room – NTLM Coercion and Understanding Its Impact appeared first on Horizon3.ai ... Read More

Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198

| | Blog, Red Team
Overview On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software actively being exploited by threat actors to install Remote […] The post Cisco IOS XE Web UI Vulnerability: A Glimpse into CVE-2023-20198 appeared first on Horizon3.ai ... Read More