Compass Security Blog blog.compass-security.com

Introducing RAPTR

blog.compass-security.com·1w

Tabletop Simulations: Where Theory Meets Reality

blog.compass-security.com·3w

Common Entra ID Security Assessment Findings – Part 4: Weak Conditional Access Policies

blog.compass-security.com·5w·r/netsec

Common Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity Management Configuration

blog.compass-security.com·6w·r/netsec

Common Entra ID Security Assessment Findings – Part 2: Privileged Unprotected Groups

blog.compass-security.com·7w·r/netsec

Common Entra ID Security Assessment Findings – Part 1: Foreign Enterprise Applications With Privileged API Permissions

blog.compass-security.com·8w·r/netsec

From Enumeration to Findings: The Security Findings Report in EntraFalcon

blog.compass-security.com·9w

WinGet Desired State: Initial Access Established

blog.compass-security.com·11w·Hacker News

From Folder Deletion to Admin: Lenovo Vantage (CVE‑2025‑13154)

blog.compass-security.com·14w

Continuous Learning – Inside our Internal Security Training

blog.compass-security.com·17w

NTLM Relaying to HTTPS

blog.compass-security.com·25w

bRPC-Web: A Burp Suite Extension for gRPC-Web

blog.compass-security.com·30w

LockBit Breach: Insights From a Ransomware Group’s Internal Data

blog.compass-security.com·32w

Ensuring NIS2 Compliance: The Importance of Penetration Testing

blog.compass-security.com·34w

Collaborator Everywhere v2

blog.compass-security.com·36w

Taming The Three-Headed Dog -Kerberos Deep Dive Series

blog.compass-security.com·37w·Hacker News

Into the World of Passkeys: Practical Thoughts and Real-Life Use Cases

blog.compass-security.com·38w

xvulnhuntr

blog.compass-security.com·45w

Pwn2Own Ireland 2024 – Ubiquiti AI Bullet

blog.compass-security.com·47w

The Dark Side of Azure Identity & Access Management – 5 IAM & Entra ID Security Risks You Can’t Ignore

blog.compass-security.com·47w

Log in to enable infinite scrolling