Who do you trust with your mission critical data and uptime? Passkey Technology is a Minnesota based IT Service Provider and MSP.
Minneapolis, MN
- Tweets 1,180
- Following 2,097
- Followers 387
- Likes 158
notice..
> Delta is blocking AI agents from booking flights
> JPMorgan Chase and Charles Schwab block agents from accessing accounts
> Yelp requires paid data licensing for agents
> Amazon has blocked Grok bot and other shopping agents.
the internet is starting to block AI agents that were supposed to do everything for us
1,190
1,228
20,603
4,686,345
Passkey Technology retweeted
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
3
21
81
10,558
Passkey Technology retweeted
#OpenIntuneBaseline Windows v4.0 is here! 🎉
Highlights include:
* Continuing to be the most agile and cutting-edge Intune baseline on the planet!
* A shake-up of Compliance policies, allowing true grace period granularity (and ditching the EAS Password policy because it's 🗑️)
* Edge settings for days! Simple support for the Edge Management Service and security hardening and user experience improvements.
* Updated M365 Apps Security baseline alignment.
* Fixed MS breaking the in-box app removal policy.
* Defender behaviour tweaks based on real customer feedback, not arbitrary check-boxes.
* Deprecated and obsolete settings sent to live on a farm.
As always:
✅ Take what you want
✅ Change what doesn't suit your environment
✅ Test it before yeeting to 40,000 endpoints on Friday afternoon
❌ Don't treat any security baseline as a magical compliance button
Check out the full release notes at: stte.me/oib26h2
Then, head on over to the OIB Deployer to deploy the new and updated policies, or check your current config vs 4.0 with the Settings Validator!
https://deploy[.]openintunebaseline.com
And, uhh, keep an eye on Friday, too ;)
#OIB #Windows #EndpointSecurity #Community #Capybara
5
27
118
5,587
The AI giant acknowledges that it could have done far more to prevent its AI agents from going rogue. But it still fails to explain why it didn't see this fiasco coming.
wired.com/story/openais-hugg…
20
52
135
54,225
Bill Gates Warns A.I. Is More Dangerous Than Big Tech Will Admit nytimes.com/2026/08/26/techn… via @NYTimes
16
Passkey Technology retweeted
Police arrests dozens of suspects in global cybercrime crackdown
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
17
48
10,690
Oops!
He copied a value out of the Windows Event Log.
Pasted it into his special browser.
And he was signed into Microsoft Entra as the user who had just authenticated.
No password. No phishing link. No stolen private key.
@MGrafnetter's Black Hat USA 2026 research...
1
21
U.S. investigates potential Iran link to water system cyberattacks cbsnews.com/video/us-investi…
1
1
93
Passkey Technology retweeted
This is another important distinction between on-prem and the cloud.
With on-prem, Microsoft issues a CVE and now its up to you to find out if your tenant was exploited and clean up the mess.
When something similar happens on Entra ID, Microsoft will put in some reasonable effort to find out which customers were impacted and then informing them. It doesn't just stop there, they help customers fix them to as needed.
Case in point, here's a great example from the nAuth abuse for Entra ID and Microsoft's response 👇
If you found this interesting, register for @wpninjasus in Jan and join all the fun with @techspence and me digging into this and more in our showdown 😂
workplaceninjas.us
Plus there is an awesome cast of folks who will be there
🍿🧨💥
CertiGhost (CVE-2026-54121) deserves much more attention than it is getting right now, from my point of view.
In a common/default AD CS setup, a low-privileged domain user can create a rogue machine account, trick the CA into issuing a certificate with the identity of a Domain Controller, authenticate as that DC via PKINIT, gain replication access and basically compromise the whole domain.
So if you run on-prem Active Directory with AD CS and your CA is still unpatched, an ordinary domain user may currently have a path to the highest privileges in your domain.
Patch it, obviously, or apply the temporary mitigation. But if you patched only recently, the harder and from my point of view more important question is: did someone already exploit it?
A patch closes the hole. It does not unfuck a domain that was already compromised.
I put a list of things I would check in the first reply.
Overview:
linkedin.com/posts/martinsoh…
Technical details:
gist.github.com/H0j3n/a5ef26…
PoC:
github.com/aniqfakhrul/CVE-2…
Microsoft advisory:
msrc.microsoft.com/update-gu…
Temporary mitigation:
nitter.siddz.com/aniqfakhrul/status/208…
4
10
98
18,408
Passkey Technology retweeted
Super impressed with @huggingface's breakdown of the AI agent autonomous cyber attack from OpenAI, including technical timeline, & interactive replay (AND how they defended against the attack)!
Here is the interactive attack replay vid and source:
huggingface.co/blog/agent-in…
27
149
787
102,439
Worth a read. slashdot.org/story/26/07/11/…
1
19
Passkey Technology retweeted
Starting today, OpenAI's GPT-5.6 family of models is available in Microsoft 365 Copilot—in Word, Excel, PowerPoint, Chat and Cowork. Learn more: msft.it/6017vIeGZ
3
32
179
9,990
Highly recommend Passkey Managed Saas Alerts or Huntress ITDR for this. One of the only current ways to protect against this. #Passkey #PasskeyTechnology #MSP #ITSP bleepingcomputer.com/news/se…
18
Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs thehackernews.com/2026/06/ap…
19
Microsoft Edge: Upgraded Copilot new tab page microsoft.com/microsoft-365/…
27