Sorry I respectfully disagree here. There are just so many examples of secure defaults significantly raising the bar against attackers. Microsoft disabling macros by default with the mark of the web is a perfect example. Attackers shifted tactics almost immediately in response.

We need systems like Entra to embrace secure defaults more often. People will not use the features in like 90% of cases if they aren't pushed in that direction. Passkeys done right would prevent the current nightmare situation of AITM phishing that the wold faces.

Every security company imaginable is going to exaggerate any opportunity to point to AI in their marketing, but I'm not sure I'd say it's an outrageous prospect to think that attackers aren't leveraging it?

mitsloan.mit.edu/ideas-made-t...

And so is this:

Yeah as I thought about it, it would depend on SMB signing and whatnot. Thanks!

This is awesome! I did not know of that arbitrary delete LPE until this. I wonder if you could you simply do an ntlmrelayx SOCKS proxy to gain a session instead of this? If it would work, that could be relayed back to the host to achive RCE.

Not sure what this talk was from, but any chance it was recorded?