information-technology
The CISOs Keeping Minnesota’s IT and Technology Companies Secure
Minnesota’s technology sector does not announce itself the way Silicon Valley does, but it has quietly built a substantial base of software companies, managed service providers, data platforms, and IT services firms ...
CISOs to Watch: Michigan’s IT Security Leaders Are Solving Problems Far Beyond State Lines
Some of the most experienced CISOs in Michigan are securing cloud platforms, managed service providers, communications infrastructure, and software companies whose clients and operations extend well beyond the Mitten. The leaders in ...
Arizona’s Cybersecurity Leaders Powering IT Services
Not every cybersecurity leader works inside a Fortune 500. Some of the most practical, hands-on security work in Arizona happens inside managed service providers, IT consulting firms, and technology companies where the ...
Cybersecurity Leaders to Watch in Washington’s Information Technology Industry
Washington’s information technology sector includes enterprise software, cloud infrastructure, digital transformation services, health data platforms, identity security, and the engineering teams that keep modern business systems running at scale. The cybersecurity leaders ...
Cybersecurity Leaders to Watch in California’s IT & Software Sectors
California’s IT and software sectors continue to produce cybersecurity leaders with deep experience across cloud transformation, enterprise risk, product security, compliance, incident response, and large-scale operational leadership. The executives in this feature ...
Azure Key Vault Tradecraft with BARK
BriefThis post details the existing and new functions in BARK that support adversarial tradecraft research relevant to the Azure Key Vault service. The latter part of the post shows an example of ...
Browserless Entra Device Code Flow
Zugspitze, Bavaria, Germany. Photo by Andrew ChilesDid you know that it is possible to perform every step in Entra’s OAuth 2.0 Device Code flow — including the user authentication steps — without a browser?Why that matters:Automating authentication flows enables ...
Misconfiguration Manager: Overlooked and Overprivileged
TL;DR: Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance. We’re also presenting this material at SO-CON 2024 on March 11, ...
Microsoft Breach — What Happened? What Should Azure Admins Do?
Microsoft Breach — What Happened? What Should Azure Admins Do?On January 25, 2024, Microsoft published a blog post that detailed their recent breach at the hands of “Midnight Blizzard”. In this blog post, I will ...
How to Break Into a Cybersecurity Career – Rob Fuller (Mubix)
This week we continue our series on how to break into a cybersecurity career with long time industry veteran, Rob Fuller (Mubix). Rob speaks with us about how he started his career ...
