6 min read
Bespoke Zero-Day Chains Are Dead. The Rental Model Won.
When multiple espionage groups can rent the same browser-to-kernel exploit chain, the window between patch release and exploitation collapses. Here's what to…
Month: <span>September 2026</span>
4 min read
Azure Functions Flex Consumption Now Holds Six Certificates Per App
The new site-scoped certificate model eliminates the Key Vault dependency for simple workloads, but the hard 3+3 limit means you'll hit the…
6 min read
My Watch Answered a Question About a Meeting That Had Already Ended
The three people across the table had seen the watch on my wrist. None of us knew it was holding a rolling…
7 min read
Instant DLP is dead. Index-based enforcement won — and it makes you wait days.
Your DLP policy shows 'distributed' but emails sail through to Gmail anyway. The problem isn't configuration—enforcement won't activate until Microsoft finishes indexing…
8 min read
The onboarding script made 40 meetings and none landed in a channel
Microsoft Graph has exactly one way to create a meeting programmatically, and it produces a private meeting every time. Here's the workaround…
3 min read
You Have 89 Days to Get OS Guard Off Your AKS Node Pools
Azure Linux with OS Guard loses support on December 10, 2026. Any AKS node pool still running it after that date stops…
4 min read
Half-Duplex Is Dead. GPT-Live-1 Won the Turn-Taking War at $0.05 a Minute
The single hardest problem in voice interfaces was never transcription—it was knowing when to shut up. GPT-Live-1's full-duplex API finally solves it,…
6 min read
Your “unlimited” archive has a ceiling at 1.5 TB. Is Microsoft finally raising it?
Auto-expanding archives will grow past 1.5 TB for E5 tenants in October. Microsoft hasn't said to what, and that vagueness matters if…
8 min read
Microsoft Architect: Active Directory Is 10x Harder to Defend Than Entra ID
When someone DCSync's your directory at 2 a.m., three questions matter: what did they take, how far did they get, and how…
3 min read
I audited a ‘three zones everywhere’ estate. Half bought resilience it couldn’t use.
Zone resiliency is a per-component decision, not a per-workload one. Most estates have it backwards: three zones on the tier that didn't…