https://tonymerisan.com/categories/post/Recent content in Post on Tony's Tech NotesHugoes-esFri, 28 Aug 2026 00:00:00 +0000https://tonymerisan.com/posts/autopilot-device-association-windows-device-preparation/Fri, 28 Aug 2026 00:00:00 +0000https://tonymerisan.com/posts/autopilot-device-association-windows-device-preparation/Microsoft just announced Device Association for Windows Autopilot Device Preparation. Hardware-backed device trust before enrollment begins — here is what changed and why it matters for IT admins.https://tonymerisan.com/posts/cve-2026-69836-entra-id-rce-cvss-10/Tue, 25 Aug 2026 00:00:00 +0000https://tonymerisan.com/posts/cve-2026-69836-entra-id-rce-cvss-10/CVE-2026-69836 is a maximum-severity RCE in Microsoft Entra ID. No customer action required but the disclosure raises harder questions about SaaS identity infrastructure trust.https://tonymerisan.com/posts/certighost-cve-2026-54121-ad-cs-dc-impersonation/Sun, 26 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/certighost-cve-2026-54121-ad-cs-dc-impersonation/CVE-2026-54121 allows a low-privileged domain user to impersonate a Domain Controller via an AD CS enrollment chase fallback, leading to full domain compromise. Patched July 2026.https://tonymerisan.com/posts/ad-stale-accounts-old-passwords-audit/Thu, 16 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/ad-stale-accounts-old-passwords-audit/Enabled accounts with passwords unchanged for years are one of the most common and exploited weaknesses in Active Directory. Here's how to find them and what to do about it.https://tonymerisan.com/posts/anydesk-ransomware-persistence-detection-mitigation/Wed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/anydesk-ransomware-persistence-detection-mitigation/32 ransomware groups use AnyDesk for persistence via a single CLI command. Here's how the attack works, how to detect it, and how to block it for free via Intune.https://tonymerisan.com/posts/entra-passkeys-default-sms-voice-retirement/Wed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/entra-passkeys-default-sms-voice-retirement/Microsoft Entra is making passkeys the default authentication method and retiring Microsoft-provided SMS and voice MFA. Here's what it is, why it's happening, and what admins need to do before February 1, 2027.https://tonymerisan.com/posts/cve-2026-26128-kerberos-reflection-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/cve-2026-26128-kerberos-reflection-bypass/CVE-2026-26128 is a Kerberos authentication reflection bypass discovered by Synacktiv that yields SYSTEM on most Windows builds. Patched in March 2026 Patch Tuesday.https://tonymerisan.com/posts/ntlm-coercion-detection-mitigation/Mon, 06 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/ntlm-coercion-detection-mitigation/What NTLM coercion is, what changed in Windows Server 2025, and how to detect and mitigate the risk in Active Directory environments.https://tonymerisan.com/posts/onelogon-netlogon-vulnerable-channel-bypass/Sat, 04 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/onelogon-netlogon-vulnerable-channel-bypass/Vulnerability Overview, Exploitation Path & Remediation Guidance — Bypass del parche Zerologon via excepciones de compatibilidad legacy.