Azure · Cybersecurity · AI
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
Recent writing, newest first.
7 min read
When a backup product needs standing permissions to read every mailbox across thousands of managed tenants, those application identities become a master…
3 min read
Your tenant is full of service principals that haven't authenticated in months, holding secrets that don't expire for years, with permissions nobody…
4 min read
Apple hasn't confirmed the foldable's biometric spec, but I ran the drill anyway: disabled Face ID for a week to find every…
8 min read
The agent enumerated a smart contract, spotted a missing access control, and signed the transaction to drain it—all autonomously. The only difference…
4 min read
CVE-2026-103849 lets attackers execute arbitrary PHP on unpatched Magento servers without authentication. If you run one, here's how to check if you're…
4 min read
Attackers don't need a phishing link or malware anymore—they just need a Teams guest invite and a display name that matches your…