Sign in

Dr Nestori Syynimaa

@drazuread.com
2.3K followers 346 following 89 posts

Principal Identity Security Researcher @Microsoft. Ex-Secureworks (PhD, MSc, MEng, CITP, CCSK). And yes, opinions are my own ;)

PostsRepliesMedia
Dr Nestori Syynimaa @drazuread.com · 27/05/2026
Last week I presented at #ICEIS conference in Benidorm 🇪🇸 the final research paper related to my PhD studies at University of Jyväskylä.
110
Dr Nestori Syynimaa @drazuread.com · 21/04/2026
New family member has finally arrived! #c64ultimate #FoundersEdition
070
Dr Nestori Syynimaa @drazuread.com · 01/04/2026
Finally, I decided to monetize #AADInternals and created an OnlyFans account! If you like to see some really cool content and give support, take a look and subscribe here: onlyfans.aadinternals.com
271
Dr Nestori Syynimaa @drazuread.com · 12/03/2026
@disobeyfi.bsky.social recordings are out now! www.youtube.com/playlist?lis...
youtube.com
Disobey 2026 Presentations - YouTube
Public presentations from Disobey 2026
020
Dr Nestori Syynimaa @drazuread.com · 09/03/2026
Got some great news last week! My research paper titled "Inside Hackers' Mind: A Qualitative Study of Offensive Security Tool Developers" was accepted to be presented at the iceis.scitevents.org conference at the end of May 🎉
170
Dr Nestori Syynimaa @drazuread.com · 24/02/2026
Recording available here: youtu.be/6MoV7SEEkJg
youtu.be
Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks
YouTube video by Microsoft Security Community
031
Dr Nestori Syynimaa @drazuread.com · 23/02/2026
Getting ready for #ELDK2026! I've got some #AADInternals stickers, just come and say hi to get one. The first one will also get a rare challenge 🪙!
000
Dr Nestori Syynimaa @drazuread.com · 19/02/2026
Folks, there's an interesting security community call next week on Mon Feb 23rd at 8am PST (I'll be speaking too): "Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks" Register now 👉 aka.ms/securitycomm...
041
Dr Nestori Syynimaa @drazuread.com · 11/01/2026
Hey peeps, anyone attending Disobey.fi next month?
disobey.fi
Disobey
Disobey - The Nordic Security Event
010
Dr Nestori Syynimaa @drazuread.com · 12/12/2025
Taking my new @msrc.microsoft.com shirt out for a spin!
060
Dr Nestori Syynimaa @drazuread.com · 11/12/2025
Catching up with @tiraniddo.dev and @fromsteph2u.bsky.social #MSRCBlackHat researcher celebration party!
140
Dr Nestori Syynimaa @drazuread.com · 10/12/2025
Hashtag correction: #BlackHatEurope 😆
140
Dr Nestori Syynimaa @drazuread.com · 10/12/2025
If you see this guy in #BöavkHayEurope, come say hi to get your #AADInternals sticker or the official "The non-US tour 2025" shirt!
000
Dr Nestori Syynimaa @drazuread.com · 20/10/2025
Heading to Buenos Aires, wish me luck 😬
140
Dr Nestori Syynimaa @drazuread.com · 20/10/2025
Perfect luggage weight for the #EkoParty!
070
Dr Nestori Syynimaa @drazuread.com · 03/09/2025
One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!
091
Reposted by Dr Nestori Syynimaa
Disobey_Fi @disobeyfi.bsky.social · 05/08/2025
You know you want to speak at Disobey 2026. And now is your chance to do that! Our CfP is open at: cfp.disobey.fi/disobey-2026/ Check the guidelines from the link and send your proposal by Sep 30th!
0117
Dr Nestori Syynimaa @drazuread.com · 01/08/2025
Checking pre-vacation research notes..
030
Dr Nestori Syynimaa @drazuread.com · 11/07/2025
Congratulations to all who renewed their Microsoft MVP status for the next year 🎉🔥
061
Dr Nestori Syynimaa @drazuread.com · 04/07/2025
Updated to include RomHack: www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org romhack.io www.blackhat.com/sector/2025/
010
Dr Nestori Syynimaa @drazuread.com · 04/07/2025
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September! www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org www.blackhat.com/sector/2025/
120
Dr Nestori Syynimaa @drazuread.com · 27/06/2025
Slides from my @wearetroopers.bsky.social talk are available at aadinternals.com/talks
060
Dr Nestori Syynimaa @drazuread.com · 25/06/2025
nOAuth revisited by @ericonidentity.com at @wearetroopers.bsky.social
032
Dr Nestori Syynimaa @drazuread.com · 25/06/2025
And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it
051
Dr Nestori Syynimaa @drazuread.com · 23/06/2025
✅️ slide deck ✅️ demos ✅️ stickers ✅️ challenge coins ✅️ running shoes All ready for the TROOPERS 2025 @wearetroopers.bsky.social
070
Reposted by Dr Nestori Syynimaa
Ru Campbell @campbell.scot · 20/06/2025
New video: Had a cool run through with @lukasberancz into the kind of gaps DART identify commonly in incident response, then a deeper dive on hardware based credential providers like macOS Platform SSO. WATCH: youtu.be/qZV3IeWsRd0
071
Dr Nestori Syynimaa @drazuread.com · 12/06/2025
Feeling confused..
250
Dr Nestori Syynimaa @drazuread.com · 03/06/2025
Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎
010
Dr Nestori Syynimaa @drazuread.com · 20/05/2025
The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘
0160
Dr Nestori Syynimaa @drazuread.com · 13/05/2025
Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️
070
Dr Nestori Syynimaa @drazuread.com · 11/05/2025
Ran this route in Oxford last time 10 years ago.
040
Dr Nestori Syynimaa @drazuread.com · 10/05/2025
One clear sign of getting old is when your Inspector Morse pub crawl ends after the second stop 🥱
140
Dr Nestori Syynimaa @drazuread.com · 10/05/2025
Getting ready for #TROOPERS 10k: Morning 🏃‍♂️‍➡️ around the Hyde Park!
050
Dr Nestori Syynimaa @drazuread.com · 28/04/2025
Happy to share that my talk "The Ultimate Guide for Protecting Hybrid Identities in Entra ID" was accepted to #TROOPERS! troopers.de/troopers25/t...
troopers.de
The Ultimate Guide for Protecting Hybrid Identities in Entra ID
TROOPERS is more than just an infoSec con. Hands-on, high-end knowledge sharing leaves you motivated and charged to
0120
Reposted by Dr Nestori Syynimaa
Mark Russinovich @markrussinovich.bsky.social · 21/04/2025
Read about our progress on securing Microsoft in our Secure Future Initiative update:
microsoft.com
Securing our future: April 2025 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog
The Microsoft Secure Future Initiative (SFI) stands as the largest cybersecurity engineering project in history and most extensive effort of its kind at Microsoft. Now, we are sharing the second SFI p...
0329
Dr Nestori Syynimaa @drazuread.com · 18/04/2025
Just pushed a new versions for #AADInternals and AADInternals-Endpoint modules! Some bug fixes plus support for: 1️⃣ Microsoft Authentication Library (MSAL) 2️⃣ Token Protection 3️⃣ Continuous Access Evaluation (CAE)
1155
Dr Nestori Syynimaa @drazuread.com · 15/04/2025
Due to recent events, I decided not to give any talks in the US until further notice. If you know any non-US conferences that has a CFP open, please let me know!
6308
Dr Nestori Syynimaa @drazuread.com · 10/04/2025
Back to reality 🥶
120
Dr Nestori Syynimaa @drazuread.com · 09/04/2025
After spending two weeks in Miami and Caribbean cruise with the best company ❤️, I'm back in business!
030
Reposted by Dr Nestori Syynimaa
Merill Fernando 💚 @merill.net · 01/04/2025
Threat hunters rejoice! This is HUUUGE news 👏 Microsoft just introduced linkable identifiers in Microsoft Entra ID logs. The bad guys 🥷 are going to hate this so much 😂 Learn more at learn.microsoft.com/... Share the good news 👍
45919
Dr Nestori Syynimaa @drazuread.com · 01/04/2025
Finally, after 10 months and 25 days, I finished reading George R. R. Martin's "A Song of Ice and Fire" series just to learn that it's still missing a book (or two).
140
Reposted by Dr Nestori Syynimaa
Katie Knowles @siigil.bsky.social · 25/03/2025
🛡️ We found a bug in restricted AUs that let accounts stay restricted (forever!) without an AU, preventing containment. Glad this is fixed now! More details here: securitylabs.datadoghq.com/articles/cre...
securitylabs.datadoghq.com
Creating immutable users through a bug in Entra ID restricted administrative units | Datadog Security Labs
Imagine trying to disable a malicious user in your Azure environment, only to find it can't be modified! We recently identified a timing-based bug in Entra ID's restricted administrative units (AUs) t...
0105
Dr Nestori Syynimaa @drazuread.com · 25/03/2025
Changed my handle to @drazuread.com 🔥
0180
Reposted by Dr Nestori Syynimaa
Merill Fernando 💚 @merill.net · 23/03/2025
👏 We just sent out this week's Entra newsletter. ⚠️ Note the important reminder on upgrading Entra Connect Sync before April 7. 👉 Read at entra.news/p/entra-n...
⚠️ Important Reminder: Entra Connect Sync must be upgraded to the versions listed below before April 7. Without this upgrade, you won't be able to use connect sync wizard capabilities.

Note: Your sync service will continue running as usual, and changes will still sync to Entra
0123
Dr Nestori Syynimaa @drazuread.com · 19/03/2025
It is not always easy to get presentations accepted to cyber security industry conferences. As a scholar, I can assure it's the same with academic conferences! This time two reviewers gave 1/6 and one 5/6 😁
120
Dr Nestori Syynimaa @drazuread.com · 13/03/2025
A bit boring morning run, but in new city!
050
Dr Nestori Syynimaa @drazuread.com · 12/03/2025
This is just something you wouldn't want to see minutes before the departure 👀
220
Dr Nestori Syynimaa @drazuread.com · 11/03/2025
My @disobeyfi.bsky.social talk is finally out! Link to video and slides available at aadinternals.com/talks And yes, @notmynick.bsky.social used some weird filter, I'm not that fat nor old 😜
1165
Reposted by Dr Nestori Syynimaa
Sami Laiho @samilaiho.com · 03/03/2025
sessionize.com/Live360_2025 Call for Speakers open!
sessionize.com
Live! 360 Tech Con Orlando 2025: Call for Speakers
Live! 360 Tech Con returns to Orlando, November 16-21, 2025 at the Loews Royal Pacific Resort, Orlando, FL. Live! 360 offers six co-located technical ...
012
Reposted by Dr Nestori Syynimaa
Steve Syfuhs @syfuhs.net · 28/02/2025
We did a thing! DES (not even 3DES) has been a pain in our necks for years, but we couldn't remove it for compat reasons. It required special config to use so it's not dangerous out of the box, but it's still just...ugh, DES. Anyway, we said enough is enough and now the code is getting deleted.
techcommunity.microsoft.com
Removal of DES in Kerberos for Windows Server and Client | Microsoft Community Hub
To enhance security and protect against cyber threats, the Data Encryption Standard (DES) encryption algorithm will be intentionally removed from...
119024