Ninjasta
Microsoft Identity, Enterprise Security & Automation
Insights from an italian bit worker
Cybersecurity
Technical articles dedicated to cybersecurity, identity protection, attack analysis, defensive strategies and securing modern Microsoft infrastructures.
-
Read More: OSINT: The Art of Discovering Everything About Anyone (Legally)OSINT: The Art of Discovering Everything About Anyone (Legally)
posted
read in
3–4 minutesWe live surrounded by data. Every post, every like, every photo we share is another breadcrumb left along our digital trail. And somewhere out there, someone observant and analytical knows…
-
Read More: Social Engineering: How Hackers Trick You Without Touching a Line of Code
Social Engineering: How Hackers Trick You Without Touching a Line of Code
posted
read in
4–6 minutesFirewalls stop malware. Antivirus blocks malicious software. Multi-factor authentication protects stolen passwords.But what protects you from yourself?Long before ransomware, AI-generated phishing campaigns, and deepfakes became everyday threats, Kevin Mitnick demonstrated…
-
Read More: Exchange and Active Directory: The Hidden Permissions Still Lurking in Your Domain
Exchange and Active Directory: The Hidden Permissions Still Lurking in Your Domain
posted
read in
3–5 minutesMicrosoft Exchange has always been one of the services most deeply integrated with Active Directory.And that’s exactly why it deserves more attention than it usually gets.When administrators think about Exchange,…
-
Read More: Lateral Movement in MIcrosoft Entra ID: What Still Works in 2025
Lateral Movement in MIcrosoft Entra ID: What Still Works in 2025
posted
read in
6–9 minutesEveryone says their environment is “Zero Trust.”However, a single token from a hybrid-joined device can still allow silent lateral movement without triggering any obvious alert.In many hybrid Microsoft Entra ID…
-
Read More: Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
posted
read in
2–3 minutesEveryone monitors Domain Admins.Very few monitor Shadow Admins.Shadow Admins are accounts that are not members of privileged groups, yet still have enough delegated permissions to compromise an Active Directory environment.In…
-
Read More: Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
posted
read in
11–17 minutesKerberos is one of the foundations of authentication in Active Directory.It allows users and services to authenticate securely without sending passwords across the network. It is reliable, scalable, and deeply…
-
Read More: Quantum Computing and Cybersecurity: How Companies Can Prepare for the Quantum Wave
Quantum Computing and Cybersecurity: How Companies Can Prepare for the Quantum Wave
posted
read in
4–6 minutesIntroduction The tech world is quietly approaching a disruptive moment: the rise of quantum computing.This isn’t science fiction or something that only concerns physicists in lab coats. It’s a technology…
-
Read More: Pass-the-Hash (PtH): Attack Technique and Complete Defenses
Pass-the-Hash (PtH): Attack Technique and Complete Defenses
posted
read in
3–5 minutesWhat is Pass-the-Hash? Pass-the-hash (PtH) is an attack technique that allows an attacker to authenticate to a remote system using the password hash, without the need for the password in…
-
Read More: Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
posted
read in
2–4 minutesActive Directory (AD) is the beating heart of identity and IT asset management in many organizations. Being a critical system, the AD frequently becomes the target of cyber attacks aimed…