RootGuard Security

rootguardsec.bsky.social

15 October 2026 09:47

Privacy obligations continue to grow, and AI is tightening the link between privacy, governance, and risk. Orgs must demonstrate lawful bases, transparency, and controls over training data and automated decisions. Siloed privacy struggle when AI systems and third parties expand the data surface.

RootGuard Security

rootguardsec.bsky.social

14 October 2026 06:18

Fraud and scams are accelerating partly because adversaries are industrializing AI, automation, and crypto. Ransomware-as-a-Service, social engineering, account takeovers, and investment scams are rising faster than legacy compliance systems can respond. Compliance is now a technology arms race.

RootGuard Security

rootguardsec.bsky.social

14 October 2026 06:18

Third-party risk is still a top weak link. Concentration risk, sub-processor blind spots, and stale questionnaires drive incidents. Regulators and boards now expect continuous monitoring, not annual attestations. TPRM needs GRC integration, clear ownership, and real evidence.

RootGuard Security

rootguardsec.bsky.social

10 October 2026 19:11

Blocking device code flow? Check who’s using it first: SigninLogs | where TimeGenerated > ago(30d) | where AuthenticationProtocol =~ "deviceCode" or OriginalTransferMethod =~ "deviceCodeFlow" | summarize count() by UserPrincipalName, AppDisplayName

RootGuard Security

rootguardsec.bsky.social

10 October 2026 19:11

Kerberoasting doesn't need admin; it needs a valid account and one request. The attacker asks a DC for a service ticket, gets it encrypted with the service account's password hash, and cracks it offline. The tell: a 4769 requesting RC4 (0x17) when your estate runs AES. Hunt the downgrade.