Move from application chaos to application control with https://nitter.cf/t.co/PxCoHDSPj8
Belgium
Joined April 2026
- Tweets22
- Following5
- Followers26
- Likes9
Pinned Tweet
Application allowlisting is the single most effective security control an organization can enforce on open devices. Windows comes with an application allowlisting feature that is included in every commercial Windows version. 1 and 1, sometimes, just equals 2, and that is ok.
AppControl.ai retweeted
Is WinGet actually enterprise-ready? 🤔
Our very own @byteben went DEEP on this one—breaking down what #WinGet gets right, where the gaps are, and how it compares to a curated enterprise catalog.
Fair warning: Ben brought receipts. 🧾
🔗 bit.ly/4wruhtR
#MSIntune #Intune
AppControl.ai retweeted
They always hide the good stuff in the notes :)
I've always liked Enterprise State Roaming, but many places never enabled it. Now the feature has been superseded by Windows settings backup and restore which will be enabled by default starting with the upcoming 26H2 release 🥳
AppControl.ai retweeted
The 𝐌𝐞𝐦𝐛𝐞𝐫𝐎𝐟 𝐫𝐮𝐥𝐞 for dynamic groups in Microsoft Entra will very soon stop working! Read more here > ourcloudnetwork.com/the-memb…
However, this isn't just for groups. It will also impact anyone using the MemberOf rule operator in the following resources:
• Dynamic membership groups
• Dynamic administrative units (AUs)
• Entitlement management auto-assignment policies
• Platforms and services
• Microsoft Entra ID
• Microsoft Entra Groups
• Microsoft Entra Administrative Units
• Microsoft Entra Entitlement Management
For some resources, policies using MemberOf will first be quarantined from 27 October 2026 which will stop any processing. Then after November 3, 2026, any group memberships will stay in their last known state.
#Microsoft #Entra #News
AppControl.ai retweeted
If you want better management of App Control policies, then I suggest you look at @magicswordio or @Appcontrolai
magicsword.io/
appcontrol.ai/
Or look at a different solution entirely, because App Control Wizard and Intune are not a good way to do this
#yaacdb Yet another Appcontrol Demonstrated benefit. "The ZIP file contains a Visual Basic Script (VBScript) that masquerades as a PDF document.", didn't think so, that's the end of the line of that attempt, long before any damage is done.
🚨 A malicious Notepad++ plugin is turning the legitimate editor into a malware loader.
CERT-UA links the campaign to Russia-aligned UAC-0099. It establishes persistence and deploys MATCHBOIL.V2 for follow-on malware.
Read more: thehackernews.com/2026/07/fa…
#yaacdb Yet another appcontrol demonstrated benefit. Loading an unknown dll, didn't think so. No one needs the privilege to run any code coming from anywhere.
Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343)
A pure-logic, 100% reliable path from a normal user to SYSTEM on Windows 11.
Full write-up: open.substack.com/pub/calif/…
Tl;Dr Nightmare Eclipse brand new Legacy hive 0-day, reliably stopped by a comprehensive Application Control implementation. Don't get in the crosshairs between this security researcher and Microsoft's vulnerability disclosure handling. Implement Application Control for business (With AppControl.ai's assistance), now.
linkedin.com/pulse/security-…
The most efficient strategy to get there is to build your trustlist by application instead of the typical web of rules to cover everything. Appcontrol.ai helps you get there with a vastly reduced worload. Schedule a demo or chat by filling in the account request form.
So, you have your allowlisting under control and only allow what is needed? Awesome. Casey released Scan-LolbinPrimitives.ps1 as a reconnaissance tool to bypass your rules by identifying what you've allowed that is subject to 'proxy execution'.
This Post is from an account that no longer exists. Learn more
YaACDB, Yet another Appcontrol Demonstrated Benefit or AAFTWA! Application allowlisting For The Win Again. Want a kickstart for your Appcontrol for business projects, appcontrol.ai
Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated
Windows
thehackernews.com/2026/06/mi…
AppControl.ai retweeted
Van 'onbekend is onbemind' naar groeiend succes: dit moet je weten over tweedehandse elektrische auto's
vrt.be/vrtnws/nl/2026/04/28/…
This is a weekly reminder that users (nor agents) should hold the privilege to run unvetted code from anywhere. It's the single biggest mistake orgs have made and keep making against the principle of least privilege. The time to start controlling what code to allow is now! #acfb
Two of Appcontrol.ai 's members, @tomdegreef and @TheWMIGuy visited the Microsoft #acfb team on campus this week for the regular in person get-together. Had an interesting morning, learned stuff that will help us build an even better product and make AppControl easier.
