Adam Boylan
David CashHidden exclusions in Entra ID Conditional Access policies let attackers bypass MFA and use an overly scoped Graph token to enumerate tenant data.
Read Article
Richard WarrenExploiting NSIS installer bugs to escalate privileges in Zscaler Client Connector
Read Article
Richard WarrenA bypass of the CVE-2025-0309 fix allowed enrolment to a rogue server via unauthenticated Netskope reverse-proxy routes.
Read Article
David Cash
Richard WarrenSummary Ok, so there’s no MSI this time but our last Delinea post was titled ‘MSI Strikes Back’ so we thought we’d stay on …
Read Article
David Cash
Richard WarrenCheck Point Harmony Local Privilege Escalation (CVE-2025-9142)
Read Article
Iain SmartFootguns and privilege escalations making multi-tenancy difficult in Kubernetes clusters.
Read Article