15 Ways to Bypass the PowerShell Execution Policy

Traces the evolution of offensive PowerShell invocation from powershell.exe command lines to in-memory .NET loading with UnmanagedPowerShell, evading process creation monitoring.

Shows how stolen Exchange credentials can be weaponized through malicious Outlook rules that sync via Exchange and trigger a Start Application action, executing payloads without workstation access.

A Project Zero post describing how VirtualBox's process hardening protections on Windows can be bypassed, with technical analysis of the underlying weaknesses.

NetSPI discovered Nested App Authentication (BroCI) flows that bypass Entra Conditional Access policies to mint Graph API tokens, mainly a post-phishing persistence vector; Microsoft has fixed it.

Details a bypass of Mimecast URL Protection and file inspection found during a social engineering pentest, responsibly disclosed to Mimecast, underscoring why layered defenses remain essential.

When Exchange blocks external forwarding rules, attackers can abuse Power Automate: an Outlook-connected flow silently forwards mail out of the tenant, evading anti-exfiltration controls.