msandbu

This is a blogpost that I have been wanting to write for a while, and since I have gotten asked a lot of questions throughout the years on this topic. How do I stay up to date on relevant topics? how do I learn new things? Therefore I wanted to write down my approach, does […]

After reading so much blog posts and new services from Palo Alto, Wiz and other security vendors selling products for either AI Secure posture management or other MODERN ways too protect from prompt injections or other types of attacks that can be used against an Generative AI service. Eventually I got tired of all the

It’s almost two years since ChatGPT was released to the public, democratizing Generative AI for all end users. Now, two years later, all the cloud providers have their own Generative AI services, models, vector databases, and various tools that support the entire ecosystem. However, we still don’t have a robust enterprise offering for building Generative

With the rise of Azure Stack HCI and now Azure Local, we see that yet again a Hypervisor battle is going on. Many are considering moving to Azure Local because of all the licensing changes and features that you now get on top of Azure Local (some for free) but ill get back to that

I have previously blogged about Entra ID Private Access for use to access various services https://msandbu.org/ztna-for-azure-private-endpoint-using-entra-private-access/ however lately I have configured it for a customer environment to provide remote access for external access for remote users. Therefore I decided to do a write-up on how we solved / designed it. Historically we have been using

Many many years ago, I wrote a lot of blog posts around the different remoting protocols (HDX, Blast, PCOIP and RDP) (back in 2016! Remote protocols benchmarking, Citrix, VMware and RDP–Part One PCoIP vs Blast Extreme – msandbu.org) While there was continuous improvements in the Citrix and VMware protocols, there was little improvements in the

Microsoft has earlier stated that they are going to deprecate the authentication protocol NTLM (NT Lan Manager) which also gives an indication of how old this protocol is! (even if Kerberos has been the default authentication protocol since 2000) and of course NTLM has unfortunately been (ab)used numerous times in different cyberattacks with techniques such

This blog post is based upon a presentation that I had for the Microsoft Security User Group in Norway earlier this week (Meetup October 2024: AVNM & Deepfakes how easy can you clone a person.., Tue, Oct 15, 2024, 4:30 PM | Meetup) where I talked about How easy has it come to clone a

The last 6 months I have been involved in numerous discussions related to virtualization and specifically related to “how do I move from A to B? what do I loose of functionality? what do I gain?”. Reason behind these discussions are often related to license cost and that their footprint within their own datacenter is

In a recent talk, I explored how Generative AI can aid us when working with IT security, going into the use-cases, some of the benefits and also something that you need to be cautious about . Here, I’ll summarize the key points and insights from the presentation. Generative AI originates from large pre-trained models designed