6 min read
The Dangerous Part of Agent Fleets Isn’t the Agents — It’s the Space Between
One LLM with tool access has one door you can guard. A fleet of agents has a corridor of connecting doors, and…
Month: <span>August 2026</span>
6 min read
Three things TerminalFix got right that ClickFix never bothered with
The new campaign doesn't exploit a vulnerability—it found a more respectable-looking room to commit the same crime. Here's how TerminalFix uses Windows…
4 min read
Microsoft makes WAM mandatory for interactive Graph PowerShell authentication
The browser fallback that many M365 admins rely on for interactive Graph sessions is being retired in favor of Windows Account Manager…
6 min read
Your TestFlight Pipeline Runs on One P-256 Key. The Aug 25 Update Is a Good Excuse to Rotate It.
A quiet TestFlight point release lands the same week iOS 27 betas start flowing through it — and it's a reminder that…
5 min read
OpenAI Just Cut Off Cursor — and It Barely Matters
OpenAI is winding down the contract that supplies GPT models to Cursor after Elon Musk's SpaceX acquired the coding startup. The retaliation…
6 min read
Microsoft Quietly Re-Touched a winget Privilege-Escalation Bug — Here’s What CVE-2026-68821 Actually Means for You
Microsoft's latest update to CVE-2026-68821 is a documentation-only change, not a new patch — but it's a good excuse to confirm your…
8 min read
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore
App-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance…
7 min read
Every Third-Party App in Your Tenant Is About to Grow an Agent. Audit the Consent Grants First.
Teams Admin Center will soon let admins one-click enable agents for apps you already own. Behind that button sits a pile of…
6 min read
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping
Microsoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten…
8 min read
Face Check Is GA: The Help-Desk Reset Scam Just Got a Biometric Wall
The phone call that started nearly every major breach of the last three years — "hi, it's me, I'm locked out, can…