CQURE

13/10/2026

A huge thank you to everyone who joined Paula Januszkiewicz for her webinar, Uncovering New Identity Theft Vectors and How to Mitigate Them! 🙌

It was great to see so much interest in the topic and have the opportunity to explore new identity theft techniques, how they work, and what we can do to defend against them.

Missed the live session? No worries! Here's a short demo from the webinar, and you can still catch the full recording.

Watch the full webinar here:
https://luma.com/TheftVectors

And if you're ready to take your Microsoft security expertise even further, check out our Advanced Microsoft Security Course for 2027.

Learn more and join us:
https://cqureacademy.com/cyber-security-training/advanced-microsoft-security-course-for-2027/

13/10/2026

NIC26 starts tomorrow!

Tomorrow, October 14, Paula Januszkiewicz will be in Norway for two technical sessions focused on Windows security, identity and forensics.

1. Breaking Identity at Scale: From DPAPI & TBAL Secrets to Full Domain Compromise
2. Windows Knows What You Did: Deep Dive into Automatic Destinations

See you tomorrow in Oslo!

If you’re joining NIC26, get your ticket here: https://nicconf.com/tickets

Want to take your Microsoft security skills further? Check out our Advanced Microsoft Security Course (AMSC) for 2027.

Learn more and join us:
https://cqureacademy.com/cyber-security-training/advanced-microsoft-security-course-for-2027/

12/10/2026

Thank you to everyone who joined us live 8th of October for our deeply technical session on new identity theft vectors! The engagement and questions in the chat were phenomenal!

During the session, we live-demonstrated Pass-The-TBAL, an original attack path researched by the CQURE Team showing how an adversary can pivot from local endpoint access straight to a full cloud identity takeover. We exposed how attackers extract credentials like SHA1 of Entra ID account from the juicy local cache, access local vaults like , and completely evade traditional /XDR visibility.

If you missed the live stream with Paula Januszkiewicz, don't worry - we’ve got you covered.
We are currently preparing the session recording alongside our technical resources, and we’ll be sending the direct access link via email.

What you’ll get in the recording:
You’ll learn the exact mechanics behind the Pass-The-TBAL attack path and walk away with a concrete change list. Your team gets actionable hardening steps and mitigation controls you can deploy on your existing infrastructure immediately.

Didn't register before the webinar? Fill out the form here to get the full recording and materials delivered to your inbox: https://luma.com/TheftVectors


CQURE Microsoft

12/10/2026

Your next cybersecurity training comes with a bonus. 🎯

October is Cybersecurity Awareness Month!

Sign up for the CQURE newsletter this October and get up to 10% off CQURE Academy courses.

Stay up to date with our latest training opportunities, cybersecurity insights, and upcoming events, while getting an extra discount on your next learning experience.

📩 Subscribe today and claim your discount: https://cqureacademy.com/

The offer excludes the Advanced Microsoft Security Course (AMSC), which is already included in a separate October promotion. If you're already subscribed to our newsletter, keep an eye on your inbox for a special email with an exclusive discount code just for you!

Paula Januszkiewicz

10/10/2026

Some courses teach features. Others teach you how to think.

The Advanced Microsoft Security Course 2027 is built around the challenges security professionals face every day. Across 12 modules and hands-on laboratories, you'll work through practical scenarios and gain experience that goes far beyond documentation and theory with our globally acclaimed TOP cybersecurity experts: Paula Januszkiewicz, Sami Laiho, Peter Kloep and Amr Thabet to name a few.

Whether you're a security engineer, consultant, analyst, architect, or incident responder, this course is designed to help you build skills that transfer directly to real environments.

Because cybersecurity is not about memorizing tools. It's about understanding how everything connects.

📅 Starting October 27
🔗 https://cqureacademy.com/cyber-security-training/advanced-microsoft-security-course-for-2027/

Microsoft

09/10/2026

What happens when your network’s digital front door becomes an attacker’s way in?

Two critical vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited.

CVE-2026-88771 and CVE-2026-88772 both have a CVSS score of 9.5 and can lead to remote code ex*****on. CISA has added both to its Known Exploited Vulnerabilities catalog.

There is one detail defenders should not overlook: if an appliance may already be compromised, patching or rebooting it can destroy valuable forensic evidence.

Before you patch, make sure you know what happened.

We break down the vulnerabilities, affected versions and recommended response in our latest article.

Read the full article:

09/10/2026

Ready to think like an attacker?

Infrastructure attacks rarely follow the clean, predictable paths shown in diagrams. They exploit misconfigurations, weak segmentation, exposed services, excessive privileges, and assumptions that nobody challenged.

That's exactly why we created the Autumn Infrastructure Pentesting Bootcamp.

Together with Paula Januszkiewicz, Artur Kalinowski, Amr Thabet and Damian Kędzierski, participants will spend five intensive days learning how modern attackers assess, compromise, and move through enterprise infrastructures.

✅ Attacks on Active Directory and Entra ID
✅ Identity Attacks
✅ Privilege escalation
✅ Exploitation and Post-exploitation techniques
✅ Hands-on labs
✅ Real-world attack scenarios

This is not a theory-based course. It's a practical bootcamp designed to help security professionals understand how infrastructures are attacked and how to defend them more effectively.

If you're serious about offensive security, this is a class you don't want to miss.

Learn more and reserve your seat 🔗 https://cqureacademy.com/cyber-security-training/autumn-infrastructure-pentesting-bootcamp/

08/10/2026

Starting in 20 minutes! Taking last registrations!

Join our free live webinar hosted by CQURE Academy, featuring Paula Januszkiewicz (CEO of CQURE and CQURE Academy, Cybersecurity Expert & Red Teamer, Microsoft…

07/10/2026

Cybersecurity isn't just an IT expense. It's a business continuity investment.

A Security Assessment helps organizations:
✅ Identify critical risks before attackers do
✅ Validate whether existing security controls are working as intended
✅ Prioritize remediation efforts based on business impact
✅ Reduce the likelihood of costly incidents and downtime

Most organizations don't lack security tools.
What they often lack is visibility into their biggest security risks.

A Security Assessment provides the insights needed to make informed security decisions, protect business operations, and focus resources where they matter most.

Finding a vulnerability before an attacker does is almost always less expensive than dealing with the consequences of a breach. Be prepared ➡️ cqure.pl/services/

06/10/2026

By the time stolen corporate credentials appear on public breach databases, they have likely been circulating in dark web marketplaces for months.
Traditional credential checks only scrape surface-level dumps.

CQURE Dark Web Monitoring scrapes and continuously scans a couple hundred sources, closed forums, and illicit channels in real time.
We identify session tokens before attackers can use them to bypass your perimeter.

Most organizations discover exposure too late. Don't be one of them - ask us about Dark Web Monitoring 👉 https://cqure.pl/services/