69 matches found
Maestro
Maestro Maestro는 사용자 워크스테이션의 C2 에이전트에서 Intune/EntraID와 상호작용하도록 설계된 post-exploitation 도구로, 사용자의 비밀번호나 Azure 인증 흐름, 토큰 조작, 웹 기반 관리 콘솔에 대한 지식이 필요하지 않습니다. Maestro를 사용하면 운영자가 사용자의 평문 비밀번호를 획득하거나, 시스템에서 PRT기본 새로 고침 토큰 쿠키를 추출하거나, 추가 도구나 SOCKS 프록시를 통한 브라우저 세션을 실행하거나, 로그인한 사용자를 대신하여 Azure에서 작업을 수행하기 위해...
YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune
이 저장소에는 README가 없습니다...
CVE-2026-34397: Improper Privilege Management
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the March 11, 2026 cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.1 To defend against similar malicious cyber...
CVE-2026-31957: Initialization of a Resource with an Insecure Default
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication attempts for...
EUVD-2021-18852
Malware in sbrugna...
EUVD-2024-23477
Malicious code in bioql PyPI...
EUVD-2024-27996
Malicious code in bioql PyPI...
EUVD-2022-29346
Malicious code in bioql PyPI...
CVE-2025-54882: Insufficiently Protected Credentials
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...
CVE-2025-54781: Insertion of Sensitive Information into Log File
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...
After installing Single-session OS VDA, Windows Hello for Business cannot be disabled via Intune.
After installing Single-session OS VDA 2209 or 2203 LTSR CU2 or later, Windows Hello for Business can no longer be disabled via Microsoft Intune...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Microsoft Intune Management Tampering (CVE-2024-30059)
Binary data androidintunecve-2024-30059.nbin...
CVE-2024-30059
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...
CVE-2024-30059
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...
CVE-2024-30059 Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
...
