Thursday, August 28, 2025

How to remove the Azure AD Connect sync proxy setting to use direct Internet connection?

 Go to "C:\Windows\Microsoft.NET\Framework64\v4.x.xxxxx\Config\machine.config


Remove the following:

<system.net>

<defaultProxy>

<proxy_usesystemdefault="true" />

</defaultProxy>

</system.net>

Print Friendly and PDF
Share/Bookmark

Thursday, July 24, 2025

Sophos Firewall: Verify if the hotfixes for CVE-2025-6704 CVE-2025-7624, CVE-2025-7382, CVE-2024-13974, and CVE-2024-13973 have been applied


To allow automatic installation of hotfixes in Sophos Firewall 20.0 and later, see the hotfix section under Sophos Firewall: System

This is also under console.

 


Print Friendly and PDF
Share/Bookmark

RSS Feed for Security

Microsoft Security Blog:

Microsoft Security Respond Centre

msrc.microsoft.com/blog/feed

 

FortiGuard Outbreak Alerts will be the mechanism for communicating important information to customers and partners. When a cybersecurity incident/attack/event occurs that has large ramifications to the cybersecurity industry and affects numerous organizations, this page will be updated with a link to the individual FortiGuard Outbreak Alert.

https://filestore.fortinet.com/fortiguard/rss/outbreakalert.xml

For more Fortinet RSS:

https://www.fortiguard.com/rss-feeds


Another  RSS feed with list of cybersecurity feed: 

GitHub - thehappydinoa/awesome-threat-intel-rss: A curated list of Awesome Threat Intelligence blogs



Print Friendly and PDF
Share/Bookmark

Tuesday, July 15, 2025

A Simple Linux. A Complete SIEM


You can download it for your test GitHub - eddiechu/Terminal-SIEM: Super light, super fast, unlimited search idea 


Reference:

A Simple Linux. | Eddie Chu


Print Friendly and PDF
Share/Bookmark

TencentOS Server V4正式获OpenSCAP官方支持,安全合规能力全面升级

TencentOS Server V4通过社区提案、代码适配和多轮测试,已正式列入 OpenSCAP 官方支持发行版列表

包含185条安全规则的基础版(basic)安全基线为例进行扫描,用户也可自行选择包含313条安全规则的标准版(standard)安全基线

 https://mp.weixin.qq.com/s/yDN7wTouvY4GeuSnIg4G9Q


Print Friendly and PDF
Share/Bookmark

Monday, June 16, 2025

Windows SMB Client Elevation of Privilege Vulnerability - CVE-2025-33073 - actively exploited in the wild

You may know the CVE-2025-33073 being reported actively exploited in the wild now.
Exploitation depends on two key conditions:







Print Friendly and PDF
Share/Bookmark

Wednesday, June 11, 2025

Azure AD Connect 2.0 change proxy setting

 1. Go to the program files -> Microsoft Azure Active Directory Connect -> To modify the file proxy config in the file "Microsoft.ApplicationProxy.Connector.Common.dll.config

2. Netsh winhttp set proxy "<proxy IP>"

3. Restart the service "Microsoft Azure AD Sync"

Then, you can run the powershell command >Start-ADSyncSyncCycle -PolicyType Initial 

To use the new proxy for the sync.

Print Friendly and PDF
Share/Bookmark