69 matches found
Maestro
Maestro Maestro は、ユーザーのパスワードや Azure 認証フロー、トークン操作、Web ベースの管理コンソールを必要とせずに、ユーザーのワークステーション上の C2 エージェントから Intune/EntraID と対話するように設計されたポストエクスプロイテーションツールです。 Maestro を使用すると、C2 から Intune および EntraID（および場合によっては他の Azure サービス）との対話がはるかに容易になります。オペレーターは、ログイン中のユーザーに代わって Azure...
YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune
このリポジトリには README がありません。...
CVE-2026-34397: Improper Privilege Management
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the March 11, 2026 cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.1 To defend against similar malicious cyber...
CVE-2026-31957: Initialization of a Resource with an Insecure Default
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication attempts for...
EUVD-2021-18852
Malware in sbrugna...
EUVD-2024-23477
Malicious code in bioql PyPI...
EUVD-2024-27996
Malicious code in bioql PyPI...
EUVD-2022-29346
Malicious code in bioql PyPI...
CVE-2025-54882: Insufficiently Protected Credentials
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...
CVE-2025-54781: Insertion of Sensitive Information into Log File
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...
After installing Single-session OS VDA, Windows Hello for Business cannot be disabled via Intune.
After installing Single-session OS VDA 2209 or 2203 LTSR CU2 or later, Windows Hello for Business can no longer be disabled via Microsoft Intune...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Microsoft Intune Management Tampering (CVE-2024-30059)
Binary data androidintunecve-2024-30059.nbin...
CVE-2024-30059
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...
CVE-2024-30059
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...
CVE-2024-30059 Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
...
