@AverageITexpert
Joined March 2022
  • Tweets3.9K
  • Following147
  • Followers43
250Media
Sebastian Schmitz retweeted
Peter Hornung@peterhornung_hhSep 30
Vollkommen transparent, verständlich und nachvollziehbar: So sollte der neue Schufa-Score sein, mit dem Millionen Verbraucherinnen und Verbraucher bewertet werden. Doch Recherchen von NDR und SZ zeigen: Das war ein leeres Versprechen. tagesschau.de/investigativ/n…

Hat die Schufa ihr Transparenz-Versprechen gebrochen?

Vollkommen transparent, verständlich und nachvollziehbar: So sollte der neue Schufa-Score sein, mit dem Millionen Verbraucherinnen und Verbraucher bewertet werden. Doch Recherchen von NDR und SZ...

tagesschau.de
1
12
1
73
25,418
Sebastian Schmitz retweeted
Simo
@SimoKohonenSep 28
Citrix Netscaler CVE-2026-88771 now being mass exploited 🍯
8
61
4
267
33,089
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerSep 27
Citrix admins warned to shut down NetScalers over 2 exploited zero-days bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security...

bleepingcomputer.com
9
58
5
159
27,778
#Digital #Deutschland #CDU ePerso ist der Chip kaputt. Beim Ausweis für schlappe 43€. Bürgeramt 🤷‍♂️ Auf meinen Druck hin könne man ihn einschicken, an die Bundesdruckerei. Ende vom Lied: Wäre 4 Wochen ganz ohne Ausweis. Eine Reparatur wäre aber unwahrscheinlich. Ach was🙄🙄@CDU
2
12
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerSep 14
Revolut discloses data breach exposing financial info, passports bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Revolut discloses data breach exposing financial info, passports

Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency.

bleepingcomputer.com
2
31
1
69
11,516
rapid7.com/blog/post/etr-cve… #Citrix #Netscaler

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

On August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability...

rapid7.com
153
Sebastian Schmitz retweeted
Matt Zorich
@reprise_99Aug 2
For those that missed it the Active Directory tier model documentation recently had a huge uplift, and even more importantly, the scripts used to configure your AD in line with this tiered model (tier 0-1-2) have been fully open sourced for your use. The updated repo also contains scripts to audit drift from the baselines, and a detailed FAQ to help you deploy the model. github.com/microsoft/ActiveD…

GitHub - microsoft/ActiveDirectoryTierModel: Deployment of an Active Directory Tier Model structure...

Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects. - microsoft/ActiveDirectoryTierModel

github.com
2
103
1
479
26,124
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerJul 21
Microsoft shares manual fix for WSUS sync delays and timeouts bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft shares manual fix for WSUS sync delays and timeouts

Microsoft has shared manual mitigations to help IT administrators fix Windows Server Update Services (WSUS) servers affected by a known issue that causes Windows Update scans to fail or time out.

bleepingcomputer.com
14
1
56
10,898
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerJul 14
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown

Progress Software has confirmed that a high-severity zero-day vulnerability is behind the emergency shutdown of ShareFile Storage Zone Controllers last week and has released security updates to patch...

bleepingcomputer.com
2
11
28
8,279
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerJul 10
🚨 BREAKING: Progress has warned ShareFile customers to immediately power down Storage Zone Controller servers due to a "credible external security threat." The company has disabled affected ShareFile accounts and says customers must manually shut down the on-premises servers while it investigates. It is unclear at this time if the threat involves a zero-day vulnerability or whether any Storage Zone Controllers have been compromised.
8
74
1
194
86,915
Sebastian Schmitz retweeted
spencer
@techspenceJul 8

How to identify attack paths in Active Directory without BloodHound

Article · @techspence
6
36
2
215
60,843
Sebastian Schmitz retweeted
spencer
@techspenceJun 18
If you're an IT or Security Admin, you've got to have a plan for how you restrict what "lolbas" or living off the land binaries are able to run on your endpoints. It's purely an attack surface management game and if you don't use stuff like @magicswordio you're missing out on a great way to make your organization harder to attack. ps - dont focus so much on the specific numbers, focus on the trends and what this says about attacks
2
10
46
3,572
Sebastian Schmitz retweeted
Nathan McNulty
@NathanMcNultyJun 17
# Disable SSPR for Admins Connect-MgGraph -Scopes Policy.ReadWrite.Authorization Update-MgPolicyAuthorizationPolicy -AllowedToUseSspr:$false learn.microsoft.com/en-us/en…

Self-service password reset policies - Microsoft Entra ID

Learn about Microsoft Entra self-service password reset (SSPR) policy options, including password complexity requirements, administrator reset policies, and password expiration settings.

learn.microsoft.com
4
25
2
159
36,245
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerJun 9
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges

A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed two previously disclosed flaws during June 2026 Patch Tuesday.

bleepingcomputer.com
2
45
2
132
13,354
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerJun 1
Critical Windows Netlogon RCE flaw now exploited in attacks bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Critical Windows Netlogon RCE flaw now exploited in attacks

The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical Windows Netlogon...

bleepingcomputer.com
52
2
102
13,087
Sebastian Schmitz retweeted
spencer
@techspenceMay 21
Throwback to one of the craziest Active Directory misconfigs I’ve ever found. I’ve seen this twice now. Found with ADeleg, one of my all time favorite tools. I built a wrapper around it, ADeleginator, that finds these issues and more. github.com/techspence/ADeleg…
14
28
236
17,637
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerMay 19
Microsoft confirms patching issues in restricted Windows networks bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft confirms patching issues in restricted Windows networks

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates.

bleepingcomputer.com
2
28
86
10,532
Sebastian Schmitz retweeted
BleepingComputer
@BleepinComputerMay 16
Microsoft rejects critical Azure vulnerability report, no CVE issued bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Microsoft rejects critical Azure vulnerability report, no CVE issued

A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his report, and without issuing a CVE. Microsoft disputes the claim, telling BleepingCompu...

bleepingcomputer.com
1
34
2
95
16,790
Sebastian Schmitz retweeted
spencer
@techspenceMay 1
MFA on RDP is security theatre… If you’re not also protecting WinRM, SMB, etc. For example on servers PSRemoting is enabled by default. Any user who’s a local admin on a server where PSRemoting is enabled and available can use New-PSSession/Enter-PSSession to connect to that remote host. This is my goto lateral movement move when I get an admin/service account.
18
21
243
18,354
Sebastian Schmitz retweeted
MSXFAQ (Frank Carius)@msxfaqApr 27
#MSXFAQ SPF, DKIM, DMARC, ARC - Kurzfassung msxfaq.de/spam/spf_dkim_dmar… - Ich durfte wieder jemand helfen, der Probleme beim Versand seiner Mails an GMail-Empfänger hatte. Vielkürzer kann ich aber SPF/DKIM/DMARC nicht erklären. Wer es so nicht versteht, dem helfe ich gerne weiter.
1
3
331
Load more