Microsoft MVP, Trainer, Strategy, Cloud Infrastructure Architects, Speaker, WorldCitizen, WPNinjasNL, 🇿🇦,🇳🇱 ❤️ Azure, Ai, Windows, Foody😋M365 #MSFTAdvocate
The Netherlands, Worldwide
Joined April 2010
- Tweets34.4K
- Following1.5K
- Followers2.5K
- Likes14.6K
Important to know which extensions are running in your Org👆
Control extensions running in Edge for Business from the Microsoft 365 admin center. Block by permission type & manage user exception requests centrally. See how it works. youtu.be/F4yO6E1guDc
Enforce your existing Microsoft security policies directly in the browser, where your users actually work, using Microsoft Edge for Business.
Extend Conditional Access, Purview DLP, and Defender controls into every session, across managed and unmanaged devices. #EdgeSecurity #MicrosoftEdge #BrowserSecurity #EnterpriseSecurity #Cybersecurity
Adnan #SecureAiInTheCloud retweeted
Saved files don't have to exit your security boundary. With Edge for Business, redirect them to your company OneDrive and keep org data close. Start here. youtu.be/F4yO6E1guDc
Enforce your existing Microsoft security policies directly in the browser, where your users actually work, using Microsoft Edge for Business.
Extend Conditional Access, Purview DLP, and Defender controls into every session, across managed and unmanaged devices. #EdgeSecurity #MicrosoftEdge #BrowserSecurity #EnterpriseSecurity #Cybersecurity
Adnan #SecureAiInTheCloud retweeted
Block non-compliant devices from internal resources with Conditional Access policies in Microsoft Intune. Enforce device compliance as the entry requirement for every user, every time. Get started. youtu.be/QdjSkbKXoJw
The speed that AI can now discover and exploit vulnerabilities means that our defenses also need to adjust.
For the devices that you manage where you can afford to tighten deployment timelines, we'll explain updated recommendations and show you how to speed up patching. #WindowsPatching #Windows11 #PatchManagement #SysAdmin #Cybersecurity
Adnan #SecureAiInTheCloud retweeted
A lot of people don't realize that Windows has a built-in feature called Windows "Sandbox" that boots up a brand new virtual Windows machine in seconds. So I made an MCP server so you can test your apps inside a throwaway machine in seconds. github.com/shanselman/sandbo…
Adnan #SecureAiInTheCloud retweeted
🆕 New CVE
Microsoft Entra Device Registration: privilege escalation in device registration (CVE-2026-109469)
An unauthenticated remote attacker can gain elevated privileges by bypassing authorization checks.
Patch → see advisory
cve.now/CVE-2026-109469?utm_…
Adnan #SecureAiInTheCloud retweeted
Check it out! You can now enable Hard Deletion Protection in Entra for specific critical resources > ourcloudnetwork.com/microsof…
Hard Delete Protection allows you to protect specific critical resources, of a chosen type, from being hard deleted in Entra. Such as, your most important users, groups, applications or service principals! Read all about it above!
#Entra #Microsoft #News
Adnan #SecureAiInTheCloud retweeted
Windows 11 can now reinstall itself from the cloud: Cloud rebuild is GA 🎉
Fresh Windows + drivers straight from Windows Update. No USB, no install media. Plus a "Remove & sanitize" option.
Needs the Oct 2026 non-security update (KB5127936)
support.microsoft.com/en-us/…
Adnan #SecureAiInTheCloud retweeted
@RemkoWeijnen and I did some research on the impact of #php2shell on @citrix @NetScaler , and published the result of our analysis on the fixed build: remkoweijnen.nl/blog/2026/10… #netscaler #cve #security @CoreLayerEU 🚨🔥 #CitrixCTP
Will be there 👆 can’t wait! #mvpbuzz
The Microsoft Ignite Session Planner is live—now’s the time to plan your attendance! 📅
Join fellow MVPs and Regional Directors (RDs) November 17–20 in San Francisco. Explore the sessions, build your schedule, and make time for new ideas and community connections. 💡 🤝
👉 Register: msft.it/6017alEVf
Adnan #SecureAiInTheCloud retweeted
Help shut down threats. Edge for Business uses on-device AI and computer vision to detect and block fake support scam pages in real time. See how it works. youtu.be/F4yO6E1guDc Enforce your existing Microsoft security policies directly in the browser, where your users actually work, using Microsoft Edge for Business. Extend Conditional Access, Purview DLP, and Defender controls into every session, across managed and unmanaged devices. #EdgeSecurity #edgeforbusiness #datalossprevention #browsersecurity #microsoft365
Adnan #SecureAiInTheCloud retweeted
🚨 Microsoft Authenticator flaw let malicious Android apps impersonate Teams and obtain work account sign-in tokens.
No app permissions needed. Researchers demonstrated access to email, files, and calendars.
Microsoft has patched it.
🔗 Read more ↓ thehackernews.com/2026/10/mi…
Adnan #SecureAiInTheCloud retweeted
✅ php2shell is fixed on @citrix @NetScaler (CTX697263, updated today): 14.1-73.49 · 13.1-64.32 · 14.1-73.49 FIPS · 13.1-37.286 FIPS/NDcPP
One build for everything – also fixes CTX697096, CVE-2026-88779 and CVE-2026-107406.
🛠️ Checker v1.18: github.com/ThomasPoppelgaard… #NetScaler #Citrix #php2shell
Adnan #SecureAiInTheCloud retweeted
Microsoft has taken steps to protect customers following an issue involving eMudhra certificate authority keys. Learn about the protections in place and recommended actions for customers: msft.it/6014aL3Ri
Adnan #SecureAiInTheCloud retweeted
🚨 97 Microsoft 365 accounts compromised across 79 organizations.
Attackers replayed stolen sign-in tokens, registered 48 rogue Entra devices, and tampered with MFA settings to maintain access.
Huntress tracked over 200,000 login attempts.
Read - thehackernews.com/2026/10/mi…
Adnan #SecureAiInTheCloud retweeted
Microsoft open-sourced an app that watches you do a task once, then teaches your AI agent to do it for you. 4.3K stars.
How Skill Recorder works:
1. Hit record (⌘⇧R or Ctrl+Shift+R) and do the task normally. You can talk through it out loud too.
2. It captures your clicks, app switches, pages and terminal commands, all on your machine.
3. GitHub Copilot turns the recording into a list of steps you can edit.
4. One click turns it into a skill your agent can run, or an automation on a schedule.
It generalizes from one example, so recording yourself submitting one form teaches the agent to submit all of them.
Runs on Mac, Windows 11 and Ubuntu. Needs a GitHub account with Copilot access.
Install: copy the one-line command from the latest release:
github.com/microsoft/skill-r…
Adnan #SecureAiInTheCloud retweeted
🚨 Hackers breached enterprise firewalls and VPNs worldwide in a campaign linked to k0t.
Over 70,000 exposed credentials identified.
Fortinet and Palo Alto devices targeted. Persistent access established. Data exfiltrated.
Inside the attack chain and suspected ransomware links: thehackernews.com/2026/10/ha…
Adnan #SecureAiInTheCloud retweeted
🚨Heads-up for anyone running Microsoft Defender for Identity: Microsoft is rolling out automatic activation of sensor v3.x and Windows event auditing for existing customers.
Here’s what’s changing:
🔹Eligible orgs (licensed for Defender for Identity with an active workspace) will see a 30-day notice banner on the Sensor management tab.
🔹After that 30-day window, both Automatic sensor v3.x activation and Automatic Windows auditing configuration turn on by default, including settings currently set to Off, via a gradual rollout.
🔹To keep your current configuration, select “Opt out” in the banner during the notice period.
If you manage Defender for Identity for your org or a client, this is worth checking now rather than after the rollout completes. Review your current sensor/auditing settings and decide whether the new defaults are appropriate before the opt-out window closes.
Full details: learn.microsoft.com/en-us/de…
#MicrosoftSecurity #DefenderForIdentity #XDR
Adnan #SecureAiInTheCloud retweeted
NSA, CISA y NIST publican nuevas directrices de seguridad para detectar y desactivar agentes de IA maliciosos
blog.segu-info.com.ar/2026/1…
Adnan #SecureAiInTheCloud retweeted
‼️ BREAKING - PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.
The flaws can enable unauthenticated code execution and expose server memory.
👉 PATCH NOW (CVE-2026-109618, CVE-2026-109619)
Details ➜ thehackernews.com/2026/10/ph…