https://tonymerisan.com/Recent content on Tony's Tech NotesHugoes-esWed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-008-anydesk-ransomware-persistence-detection-mitigation/Wed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-008-anydesk-ransomware-persistence-detection-mitigation/32 ransomware groups use AnyDesk for persistence via a single CLI command. Here's how the attack works, how to detect it, and how to block it for free via Intune.https://tonymerisan.com/posts/kb-007-entra-passkeys-default-sms-voice-retirement/Wed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-007-entra-passkeys-default-sms-voice-retirement/Microsoft Entra is making passkeys the default authentication method and retiring Microsoft-provided SMS and voice MFA. Here's what it is, why it's happening, and what admins need to do before February 1, 2027.https://tonymerisan.com/posts/kb-009-ad-stale-accounts-old-passwords-audit/Wed, 15 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-009-ad-stale-accounts-old-passwords-audit/Enabled accounts with passwords unchanged for years are one of the most common and exploited weaknesses in Active Directory. Here's how to find them and what to do about it.https://tonymerisan.com/posts/kb-006-cve-2026-26128-kerberos-reflection-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-006-cve-2026-26128-kerberos-reflection-bypass/CVE-2026-26128 is a Kerberos authentication reflection bypass discovered by Synacktiv that yields SYSTEM on most Windows builds. Patched in March 2026 Patch Tuesday.https://tonymerisan.com/posts/kb-005-ntlm-coercion-detection-mitigation/Mon, 06 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-005-ntlm-coercion-detection-mitigation/What NTLM coercion is, what changed in Windows Server 2025, and how to detect and mitigate the risk in Active Directory environments.https://tonymerisan.com/posts/kb-004-onelogon-netlogon-vulnerable-channel-bypass/Sat, 04 Jul 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-004-onelogon-netlogon-vulnerable-channel-bypass/Vulnerability Overview, Exploitation Path & Remediation Guidance — Bypass del parche Zerologon via excepciones de compatibilidad legacy.https://tonymerisan.com/posts/kb-003-forticlient-vpn-no-conecta/Sun, 17 May 2026 00:00:00 +0000https://tonymerisan.com/posts/kb-003-forticlient-vpn-no-conecta/KB #3 · Síntoma, causas y resolución paso a paso