Petrus Vasenius

Petrus Vasenius

@vasenius.fi

Cloud Security leader @ U42 🛡️☁️ | Reposts/Likes ≠ Endorsements | #CyberSecurity | #SecOps

134 followers201 following136 posts

Petrus Vasenius
@vasenius.fi

We analyze novel attack vectors where malicious JavaScript is dynamically generated at runtime. This process leverages client-side API calls to trusted LLM services, initiated from an initially benign webpage (hiding malicious code in a text prompt). Read the threat brief here: bit.ly/4qQW0Cp

bit.lyThe Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real TimeWe discuss a novel AI-augmented attack method where malicious webpages use LLM services to generate dynamic code in real-time within a browser.
Petrus Vasenius
@vasenius.fi

Vibe Coding and Vulnerability: Why Security Can’t Keep Up The promise of AI-assisted development, or “vibe coding,” is undeniable: unprecedented speed and productivity for development teams. unit42.paloaltonetworks.com/securing-vib... #VibeCoding #AISecurity #RiskManagement #Unit42

unit42.paloaltonetworks.comSecuring Vibe Coding Tools: Scaling Productivity Without Scaling RiskAI-generated code looks flawless until it isn't. Unit 42 breaks down how to expose these invisible flaws before they turn into your next breach.
Petrus Vasenius
@vasenius.fi

Microsoft is increasing prices for many of its products due to changes in its Enterprise Agreement (EA) volume licensing, effective November 1, 2025. The company is eliminating tiered discounts. This change will result in a cost increase of 6% to 12% for many. www.microsoft.com/en-us/licens...

microsoft.comMicrosoft Online Services: Pricing Consistency Update | Microsoft Licensing ResourcesUpcoming updates to Online Services pricing under volume licensing programs.

Petrus Vasenius reposted

Hacker & Security News
@hacker.at.thenote.app

Struggling to manage it all at work? 5 ways to delegate like a pro - and lighten your load Leading isn't easy. Five business leaders share how to hand off responsibility, build trust, and focus on long-term success. #hackernews #news

zdnet.comStruggling to manage it all at work? 5 ways to delegate like a pro - and lighten your loadLeading isn't easy. Five business leaders share how to hand off responsibility, build trust, and focus on long-term success.
Petrus Vasenius
@vasenius.fi

If you want to learn more about how to use the #entraid advanced features for your blue team, check out my talk on Thursday at 11.45 AM! #iam #CyberSecurity #tallinn

Cloud Tech Tallinn@cloudtechtallinn.com

Our agenda is now published on our website 🥳🥳🥳 Check it out and start planning your days! Agenda: cloudtechtallinn.com/agenda Tickets: cloudtechtallinn.com #CTTT26 #VisitTallinn

Petrus Vasenius reposted

elainegoldie.bsky.social
@elainegoldie.bsky.social

Amazon Outage is Waking People up Regarding Our Slavery to the Internet - U.S. Government Failing in Defense Against Cyberattacks medicalkidnap.com/2025/10/23/a...

medicalkidnap.comAmazon Outage is Waking People up Regarding Our Slavery to the Internet – U.S. Government Failing in Defense Against Cyberattacks - Medical KidnapIn the wake of the Amazon Web Services (AWS) outage earlier this week, there have been numerous articles published in the media concerning just how vulnerable our society has become to just a few Big ...
Petrus Vasenius
@vasenius.fi

A foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions about the need to solidify further federal security protections. www.csoonline.com/article/4074...

csoonline.comForeign hackers breached a US nuclear weapons plant via SharePoint flawsA foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions a...

Petrus Vasenius reposted

Hacker & Security News
@hacker.at.thenote.app

ConnectWise fixes Automate bug allowing AiTM update attacks ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...] #hackernews #news

bleepingcomputer.comConnectWise fixes Automate bug allowing AiTM update attacksConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]

Petrus Vasenius reposted

dotnewstv.bsky.social
@dotnewstv.bsky.social

China accuses US of cyberattack: Beijing says sensitive info stolen; what is National Time Center? Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the…

dotnewstv.inChina accuses US of cyberattack: Beijing says sensitive info stolen; what is National Time Center?Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the facility could disrupt network communications, financial systems and power supply.The Ministry of State Security said in a WeChat post that the US agency exploited vulnerabilities in the messaging services of a foreign mobile phone brand in 2022 to steal sensitive information from devices used by the center’s staff.
Petrus Vasenius
@vasenius.fi

Just shared a new blog post on how Microsoft Azure’s Security Suite gets even stronger with Palo Alto Networks’ tech and Unit 42’s intelligence. It’s about collaboration, visibility, and resilience across every layer of defense. Read here 👇 vasenius.fi/enhancing-mi...

vasenius.fiEnhancing Microsoft Azure's Security Suite with Palo Alto Networks and Unit 42 - The Security EverywhereDisclaimer: This post reflects my personal perspective as I begin my new role at Unit 42. The views expressed here […]

Petrus Vasenius reposted

Hacker & Security News
@hacker.at.thenote.app

NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed … #hackernews #news

securityboulevard.comNDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile WorldAuthor, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.
Petrus Vasenius
@vasenius.fi

Rolling out Microsoft Purview just got easier. This friendly deployment guide turns the latest models and the lightweight blueprint into a simple good, better, best path. Start fast, protect data, grow with confidence. Read more: vasenius.fi/how-to-choos... #MicrosoftPurview #DataSec

vasenius.fiHow to Choose the Right Microsoft Purview Deployment Model - The Security EverywhereRolling out Purview doesn’t have to feel like a maze. Microsoft has packaged its guidance into short, scenario driven “deployment […]
Petrus Vasenius
@vasenius.fi

Unify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention. vasenius.fi/microsoft-pu... #MicrosoftSecurity #SecOps #SecurityOperations #MicrosoftSentinel #MicrosoftPurview

vasenius.fiMicrosoft Purview with Unified SecOps - Powerful Combination? - The Security EverywhereUnify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention.

Petrus Vasenius reposted

Tivi
@tivilehti.bsky.social

GPT-5:n pettymys nosti esiin kiusallisen totuuden – Suomalaisprofessori avaa, miksi kielimallit kompuroivat

tivi.fiGPT-5:n pettymys nosti esiin kiusallisen totuuden – Suomalaisprofessori avaa, miksi kielimallit kompuroivatGPT-5:n epäonnistunut lanseeraus on herättänyt taas keskustelua kielimallien kehityksen hidastumisesta. Helsingin yliopiston tietojenkäsittelyprofessori Hannu Toivonen kertoo, että kielimallit eivät voi kehittyä loputtomiin.
Petrus Vasenius
@vasenius.fi

Cut down investigation time and surface real insider threats faster: automate your Insider Risk Management workflow in Microsoft Purview with policy templates, adaptive protection, and Power Automate. vasenius.fi/how-to-autom... #MicrosoftPurview #insiderriskmanagement #DataSecurity

vasenius.fiHow to Automate Insider Risk Management Using Microsoft Purview Risk Policies - The Security EverywhereLearn how to turn insider risk detection into consistent, scalable action by automating workflows with Microsoft Purview risk policies, adaptive protection, and Power Automate - complete with playbook...
Petrus Vasenius
@vasenius.fi

🚀 Thrilled to announce that I’ll be speaking at #CloudBrew2025, two-day Azure community conference in Mechelen, Belgium (11-12 December 2025)! Join me on Friday 12 Dec at 11:40 CET for my advanced security talk about AI Security at Alcazar room. #AzureSecurity #MicrosoftAI #Conference

Petrus Vasenius
@vasenius.fi

We're at @zure.com are proud to share that we've earned two more Microsoft Specializations: 🔹 Build AI Apps on Microsoft Azure 🔹 Threat Protection That brings us to a total of six Specializations—an exciting milestone for our growing team of Azure experts.

Petrus Vasenius
@vasenius.fi

Lately, I’ve been working with Data Management Landing Zones (DMLZ) and have compiled a set of practical insights and deployment tips for successful implementation. vasenius.fi/getting-star... #DataManagement #DataSecurity #DMLZ

vasenius.fiGetting started with Azure Data Management Landing Zone - The Security EverywhereThe Data Management Landing Zone (DMLZ) is the cornerstone of Microsoft’s Cloud-Scale Analytics framework. When implemented correctly, it gives every […]
Petrus Vasenius
@vasenius.fi

I wrote a brief collection of Security updates, picked from the MS Build "Book of News”. MS Build is an annual developer conference hosted by Microsoft. 🔗 Read the list from here: vasenius.fi/microsoft-bu... #AISecurity #MSSecurity #CloudSecurity #MSBuild

vasenius.fiMicrosoft Build 2025 — Security Highlights in the “Book of News” - The Security EverywhereMicrosoft Build (often shortened to MS Build) is an annual developer conference hosted by Microsoft. It’s designed primarily for software […]

Petrus Vasenius reposted

Micah Lee
@micahflee.com

DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server micahflee.com/ddosecrets-p...

micahflee.comDDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive serverThis morning, Distributed Denial of Secrets published 410 GB of data hacked from TeleMessage, the Israeli firm that makes modified versions of Signal, WhatsApp, Telegram, and WeChat that centrally arc...
Micah Lee@micahflee.com

Here's how the TM SGNL server, which had access to plaintext chat logs from people like Mike Waltz, got hacked in about 20 minutes www.wired.com/story/how-th... (my first article in @wired.com!)

wired.comHow the Signal Knockoff App TeleMessage Got Hacked in 20 MinutesThe company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.