3 min read
GitHub’s New Auth Preview Only Works With Entra ID Right Now
The source material is sparse, but the exclusivity is real: if your shop runs Okta or Google as the primary IdP, this…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
6 min read
Why Did Your OpenAI Bill Jump to $40,000 Overnight?
When your AI billing dashboard jumps from $200 a day to $38,000 overnight, you haven't been hacked—someone just found your API key…
5 min read
Your PeopleSoft WAF Rule Is a String Match. ShinyHunters Brought a Percent Sign.
Organizations deployed WAF rules to block CVE-2026-35273 exploitation and marked the tickets closed. ShinyHunters just proved those virtual patches fail when attackers…
4 min read
Platform-Based Conditional Access Rules Don’t Block Unknown Devices—Block by Default Instead
Legacy browsers, custom user-agents, and certain API clients don't report a device platform to Entra ID—and your platform-scoped Conditional Access rules ignore…
3 min read
Restore Azure VMs Before Their Snapshots Finish — Premium v2 and Ultra Only
Microsoft made VM snapshot and restore parallel instead of sequential, which matters if you've ever waited through a 2 a.m. recovery. The…
3 min read
0.15% and a Chip You Can’t Touch: Thousands of Banks Sue Apple Pay
Apple charges issuers 0.15% per transaction and blocks rivals from the NFC chip. This week thousands of those issuers won the right…