iOS 27’s iPhone Handoff feature won’t break your MDM enrollment. It will break the assumption three layers down in your auth stack that treats phone numbers as unique device identifiers—and that’s the thing you should’ve fixed years ago.
Continue Reading
System prompts are suggestions, and app-layer approval breaks the moment an agent chains tool calls without returning to a human. The only authorization check that matters is the one at the resource where the damage would happen.
Continue Reading
CVE-2026-9586 chains unauthenticated SQL injection to code execution to reverse shell deployment in Sangoma Switchvox VoIP systems, and attackers are exploiting it in the wild right now. If you have Switchvox on your network and haven’t patched, the window between “I’ll get to it” and “compromised” is measured in hours.
Continue Reading
If your M365 tenant has never added a verified custom domain and every user still signs in with a .onmicrosoft.com address, Teams external collaboration stopped working this month. Here’s what MOERA is, why Microsoft pulled the plug, and the two-step fix admins keep getting wrong.
Continue Reading
Azure Front Door used to force you into multiple profiles if you wanted different WAF rules for different apps. The new profile-level and route-level policy association changes that—and the blast radius.
Continue Reading
The scary number isn’t 153 million—it’s zero organizations admitting the breach. I tested credit freeze against monitoring for a week to see what actually stops the fraud.
Continue Reading
The ugliest part of mobile sign-in has been the bounce to a system browser and back. Entra External ID just shipped GA support for Google, Facebook and Apple login that keeps the entire flow inside your app’s own UI.
Continue Reading
Defender for Cloud just closed the serverless container security gap with agentless scanning for Azure Container Apps. Three things it finally sees, and one critical capability it probably doesn’t include.
Continue Reading
Apple’s longtime App Store overseer is stepping back, but the company hasn’t named who inherits the rulebook that governs developer policy, enterprise distribution, and regulatory fights.
Continue Reading
Late betas sometimes land final Passkeys or Platform SSO changes mid-migration. I diffed beta 8’s identity surface so you know whether to care — and how to check the next one yourself.
Continue Reading