Ridgeline Cyber

ridgelinecyber.bsky.social

10 October 2026 19:13

Any domain user can request Kerberos service tickets for accounts with SPNs. No admin needed. But not all are equally vulnerable. Prioritise accounts with RC4 enabled and old passwords. Hunt by encryption type and password age, not just SPNs.

Ridgeline Cyber

ridgelinecyber.bsky.social

10 October 2026 19:13

Malware often hides behind legitimate processes like powershell.exe or cmd.exe. The real clue? Parent-child relationships. PowerShell launched by Word or Outlook? CMD spawned by a PDF reader? Investigate. The process name may be innocent. The parentage tells the story.

Ridgeline Cyber

ridgelinecyber.bsky.social

10 October 2026 19:13

Unquoted Windows service paths can enable privilege escalation to SYSTEM. Windows may try `C:\Program.exe` before the intended executable. An unquoted path alone isn't a vulnerability. Check whether users can write to an earlier path location. The path is the lead. Write access is the finding.

Darryl Ruggles

darryl-ruggles.cloud

17 May 2025 16:44

medium.com/@yoshiyuki.w... Setting up automation is key to maintaining clean environments. Relying on manual user intervention is full of problems as people get distracted and priorities change. It is very easy to waste $$$s when running in the cloud but using the tools provided can help. (1️⃣/3️⃣) 🧵

Paddict

parablesofffuego.bsky.social

13 March 2025 08:41

The Medusa ransomware attack on over 300 organizations highlights the urgent need for robust cybersecurity measures. It's a stark reminder of the vulnerabilities in critical infrastructure and the importance of staying vigilant against evolving threats.