7 min read
Eight eMudhra CA Private Keys Compromised—Browsers Blocking Certificates, Check Your Chains Tonight
Eight eMudhra intermediate CA signing keys are in the wild, giving attackers the ability to issue valid TLS certificates for any domain.…
Azure · Cybersecurity · AI
Enterprise IT, rewritten in real time.
Field notes on Azure, identity, and the AI shift changing how enterprise IT actually runs — from someone shipping the fixes, not just the takes.
The latest
Recent writing, newest first.
4 min read
Can You See What Your AI Agents Are Actually Doing in Your Tenant?
Microsoft just acknowledged that AI agents with tenant access are an insider-threat surface. Here's what Project Perception monitors, what it doesn't prevent,…
4 min read
Over-Provisioned Compliance Admins Are Dead. View-Only Device Management Won.
Purview DLP now offers a View-Only Device Management role that lets SOC analysts and compliance staff see device onboarding status without the…
4 min read
Three Ways App A Calls App B Badly—and Why ID-JAG Kills Two of Them
When your frontend needs to call a backend microservice on behalf of a user, the usual OAuth patterns either leak credentials, train…
6 min read
All-or-Nothing Peering Is Dead: Azure Drops Routes Per Subnet
Azure's new route-table flag suppresses peering routes on chosen subnets. The routing layer can finally enforce segmentation—but it's a scalpel, not a…
6 min read
I Diffed iOS 27.2 RC. The Release Notes Weren’t the Story.
Apple's iOS 27.2 RC release notes won't tell you if Sign in with Apple token validation breaks or if a LAContext change…