Last week I presented at #ICEIS conference in Benidorm 🇪🇸 the final research paper related to my PhD studies at University of Jyväskylä.
Dr Nestori Syynimaa
@drazuread.com
Principal Identity Security Researcher @Microsoft. Ex-Secureworks (PhD, MSc, MEng, CITP, CCSK). And yes, opinions are my own ;)
Finally, I decided to monetize #AADInternals and created an OnlyFans account! If you like to see some really cool content and give support, take a look and subscribe here: onlyfans.aadinternals.com
Got some great news last week! My research paper titled "Inside Hackers' Mind: A Qualitative Study of Offensive Security Tool Developers" was accepted to be presented at the iceis.scitevents.org conference at the end of May 🎉
Recording available here: youtu.be/6MoV7SEEkJg
Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks
YouTube video by Microsoft Security Community
youtu.be
Folks, there's an interesting security community call next week on Mon Feb 23rd at 8am PST (I'll be speaking too): "Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks" Register now 👉 aka.ms/securitycomm...
Getting ready for #ELDK2026! I've got some #AADInternals stickers, just come and say hi to get one. The first one will also get a rare challenge 🪙!
Folks, there's an interesting security community call next week on Mon Feb 23rd at 8am PST (I'll be speaking too): "Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks" Register now 👉 aka.ms/securitycomm...
Hey peeps, anyone attending Disobey.fi next month?
Disobey
Disobey - The Nordic Security Event
disobey.fi
Catching up with @tiraniddo.dev and @fromsteph2u.bsky.social #MSRCBlackHat researcher celebration party!
If you see this guy in #BöavkHayEurope, come say hi to get your #AADInternals sticker or the official "The non-US tour 2025" shirt!
One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!
What happens when Microsoft's own apps launch a DDoS attack against Entra during a major outage? 😱 We just dropped a new podcast spilling the internal "war stories" behind some of the past outages & the incredible resilience tech born from them Listen to the latest at entra.news/p/inside-...
You know you want to speak at Disobey 2026. And now is your chance to do that! Our CfP is open at: cfp.disobey.fi/disobey-2026/ Check the guidelines from the link and send your proposal by Sep 30th!
Congratulations to all who renewed their Microsoft MVP status for the next year 🎉🔥
Updated to include RomHack: www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org romhack.io www.blackhat.com/sector/2025/
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September! www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org www.blackhat.com/sector/2025/
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September! www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org www.blackhat.com/sector/2025/
And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it
✅️ slide deck ✅️ demos ✅️ stickers ✅️ challenge coins ✅️ running shoes All ready for the TROOPERS 2025 @wearetroopers.bsky.social
New video: Had a cool run through with @lukasberancz into the kind of gaps DART identify commonly in incident response, then a deeper dive on hardware based credential providers like macOS Platform SSO. WATCH: youtu.be/qZV3IeWsRd0
Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎
The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘
Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️