3 min read
Three things CLOSEDQUORUM breaks about how your SOC hunts C2
Cisco Talos found malware that makes its own C2 decisions without operator input—the first reported instance of fully autonomous command-and-control. Here's what…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
8 min read
The OneDrive 5 TB ceiling isn’t the problem. What you stored there is.
Microsoft is forcing 25 TB accounts back to 5 TB, and admins are furious. But the real problem isn't the ceiling—it's that…
4 min read
Your Graph Script Isn’t Fast, the SDK Is Just Swallowing the 429s
The Microsoft.Graph SDK's retry handler silently absorbs throttle delays, making scripts appear fast when they're spending minutes waiting on 429 responses. Here's…
4 min read
Three things Azure Container Apps Sandboxes still won’t do for you
Microsoft's new GA feature offloads VM-grade isolation for untrusted code to a managed service. The gaps that remain — secrets, egress, and…
7 min read
Your iPhone Was Always a Card Terminal—Apple Turned It On in Eight More Countries
The Secure Enclave and NFC controller were always capable of replacing the rented card terminal. On September 22, Apple flipped the switch…
7 min read
Three things broke when I enabled GPT-6 caching—the fourth cut my bill 70%
GPT-6's new caching API lets you mark exactly where stable context ends and volatile input begins—but only if your prefix is actually…