Simon Willison talks about ChatGPT's new memory dossier feature. In his explanation, he illustrates how much the LLM -- and the company -- knows about its users. It's a big quote, but I want you to read it all. Here's a prompt you can use to give you a solid idea of what's in that summary. I first saw this shared…

Protecting critical assets  Traditional security solutions often operate in a one-size-fits-all alert model that treats every detection equally,...

This blog aims to dispel common misconceptions surrounding Microsoft Security Copilot, a cutting-edge tool designed to enhance cybersecurity measures. By...

Microsoft has confirmed several cloud security vulnerabilities, including one with a maximum critical rating of 10.

Entra ID populates the sponsor property for new guest accounts with details of the person who invites the guest to the tenant. It's data that should be used

This post provides everything you need to ensure Advanced Auditing is fully configured and auditing everything we possibly can for both existing and new users. I recently shared guidance for this via social media (see below), and it felt like a perfect time to revisit my previous posts and combine everything into one comprehensive guide :) You likely aren't collecting all available events to the Unified Audit Log First, not all events are enabled or retained optimally. Consider creating this policy in the Purview portal (leave users and record types blank to collect everything). Retention is based on license... pic.twitter.com/IEKKfrkpI8

Experts say that the way you handle things after the criminals break in can make things better or much, much worse

YouTube video by Derek Sivers

The ultimate PingCastle cheat sheet. Master PingCastle commands for effective Active Directory pentesting and security assessments.

Security researchers have warned of attackers using new high-speed brute-force password attacks against Microsoft 365 accounts—here’s what you need to know.

The MSOnline module retirement happens in April 2025 and the AzureAD module follows in the 3rd quarter. It's way past time to upgrade PowerShell scripts.

Learn how Tailscale can get through Network Address Translators (NAT) and securely connect your devices directly to each other.

Hyper-personalized emails use “an immense amount” of scraped data.

It’s 2025, so it’s time to reflect on 2024 :). In this blog post, I will highlight all the great PowerShell things that happened during the year.

AI-powered attacks on our credentials are up in every way imaginable - including email and social engineering phishing attacks